PT-2023-15049 · WordPress · Wp Trio Conditional Shipping For Woocommerce

·

CVE-2022-46805

·

Publicado

2023-03-01

·

Atualizado

2023-03-08

CVSS v3.1

5.4

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin versions <= 2.3.1
Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability, which can lead to the activation or deactivation of plugin rulesets.
Recommendations For versions <= 2.3.1, update to a version greater than 2.3.1 to resolve the issue.

Correção

CSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2022-46805

Produtos afetados

Wp Trio Conditional Shipping For Woocommerce