YITH Essential Kit for WooCommerce #1, c1c4ceda507bfb133a9fe97e93b9caf47601a16f

CVE, Research URL: c1c4ceda507bfb133a9fe97e93b9caf47601a16f
Home page URL: Security reports for YITH Essential Kit for WooCommerce #1
Application: YITH Essential Kit for WooCommerce #1
Published on: -
Research Description: YITH Essential Kit for WooCommerce #1 [yith-essential-kit-for-woocommerce-1] < 2.14.0 WordPress YITH Essential Kit for WooCommerce #1 Plugin <= 2.13.0 is vulnerable to Cross Site Request Forgery (CSRF) Update the WordPress YITH Essential Kit for WooCommerce #1 plugin to the latest available version (at least 2.14.0). Lana Codes discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress YITH Essential Kit for WooCommerce #1 Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. For example a password change which will then allow the malicious actor to login into the admin account. This vulnerability has been fixed in version 2.14.0.
Affected versions: max 2.14.0.
Status: vulnerable