CVE-2023-6625

Name of the Vulnerable Software and Affected Versions Product Enquiry for WooCommerce WordPress plugin versions prior to 3.1

Description The issue is related to the lack of a CSRF check when deleting inquiries, which could allow attackers to make a logged-in admin delete them via a CSRF attack.

Recommendations For versions prior to 3.1, update to version 3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the inquiry deletion functionality to minimize the risk of exploitation.