Challan – PDF Invoice & Packing Slip for WooCommerce, c0e638522757dc0e018dc791befa7fdc871f818a
- CVE, Research URL
- Published on
- Mar 21, 2023
- Research Description
- Challan – PDF Invoice & Packing Slip for WooCommerce [webappick-pdf-invoice-for-woocommerce] < 3.4.9 WordPress Challan – PDF Invoice & Packing Slip for WooCommerce Plugin <= 3.4.8 is vulnerable to Cross Site Request Forgery (CSRF) No patched version is available. No reply from the vendor. Lana Codes discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Challan – PDF Invoice & Packing Slip for WooCommerce Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. This vulnerability has not been known to be fixed yet.
- Affected versions
-
Min -, max 3.4.9.
- Status
-
vulnerable