cleantalk
Vulnerabilities and Security Researches

Product Category Showcase for WooCommerce, 667fdaf13fdec4b024da541ed2dc18942c8e265d

Published on
Sep 04, 2023
Research Description
Product Category Showcase for WooCommerce [wc-category-showcase] < 2.0.0 WordPress Product Category Showcase for WooCommerce Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF) No patched version is available. Lana Codes discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Product Category Showcase for WooCommerce Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. This vulnerability has not been known to be fixed yet.
Affected versions
max 2.0.0.
Status
vulnerable