CVE-2022-3154

Name of the Vulnerable Software and Affected Versions Woo Billingo Plus WordPress plugin versions prior to 4.4.5.4 Integration for Billingo & Gravity Forms WordPress plugin versions prior to 1.0.4 Integration for Szamlazz.hu & Gravity Forms WordPress plugin versions prior to 1.2.7

Description The issue is related to a lack of CSRF checks in various AJAX actions, which could allow attackers to make logged-in users with Shop Manager and above permissions perform unwanted actions, such as deactivating the plugin's license.

Recommendations For Woo Billingo Plus WordPress plugin versions prior to 4.4.5.4, update to version 4.4.5.4 or later. For Integration for Billingo & Gravity Forms WordPress plugin versions prior to 1.0.4, update to version 1.0.4 or later. For Integration for Szamlazz.hu & Gravity Forms WordPress plugin versions prior to 1.2.7, update to version 1.2.7 or later.