Themes Vulnerabilities

Woostify < 1.9.2 - CSRF Bypass

Description

The theme did not properly check for CSRF, allowing attackers to bypass them and make logged in users add products and edit quantity in their checkout basket

Affects Themes

woostify
Fixed in 1.9.2

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
4.3 (medium)

Miscellaneous

Original Researcher
WPScanTeam
Verified
Yes
WPVDB ID
675b2c6a-b7db-4454-b82f-fea3bc531c1b

Timeline

Publicly Published
2021-07-02 (about 4 years ago)
Added
2021-07-02 (about 4 years ago)
Last Updated
2021-07-02 (about 4 years ago)

Other

Published
Title
Published
2024-04-05
Title
WordPress Tooltips < 9.5.3 - Cross-Site Request Forgery
Published
2025-01-16
Title
Stop Comment Spam < 0.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2025-06-05
Title
Widgetize Pages Light <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2023-12-07
Title
PayTR Taksit Tablosu <= 1.3.4 - CSRF
Published
2025-03-11
Title
Back To Top <= 2.0 - Cross-Site Request Forgery