Wishlist and Compare for WooCommerce, ad09a648-3c34-4870-b156-097af4fd7a57
- CVE, Research URL
- Application
- Published on
- -
- Research Description
- Wishlist and Compare for WooCommerce [wishlist-and-compare] < 1.0.5 ThemeHigh WooCommerce Wishlist and Comparison < 1.0.5 - Unauthorised AJAX call Some AJAX actions did not have proper CSRF and authorisation checks, allowing unauthorised call either via unauthenticated/low privilege users or CSRF, which could allow attackers to reset or change the settings of the plugin for example
- Affected versions
-
max 1.0.5.
- Status
-
vulnerable