PT-2026-4257 · Woocommerce · Woocommerce Stock Manager

Arif Shaikh

·

CVE-2026-24365

·

Publicado

2026-01-22

·

Atualizado

2026-01-22

CVSS v3.1

5.4

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions Stock Manager for WooCommerce versions prior to 3.6.0
Description The software contains a Cross-Site Request Forgery (CSRF) flaw. This allows attackers to potentially perform actions on behalf of authenticated users without their knowledge.
Recommendations Update Stock Manager for WooCommerce to version 3.6.0 or later.

Correção

CSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2026-24365

Produtos afetados

Woocommerce Stock Manager