PT-2026-48634
CVE-2022-44630
·
Published
2022-11-11
·
Updated
2026-09-29
Description by
CVSS 3.1
4.6
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
YITH WooCommerce Product Slider Carousel versions prior to 1.16.0
Description
A Cross-Site Request Forgery (CSRF) flaw exists in the software. CSRF is a type of attack that tricks a victim into submitting a malicious request. It inherits the victim's identity and privileges to perform unauthorized actions on the target application.
Recommendations
Update to a version later than 1.16.0.
Found an issue in the description? Have something to add? Feel free to write us 👾