WordPress Plugin Vulnerabilities

WooCommerce Address Book < 1.6.0 - CSRF

Description

The WooCommerce Address Book WordPress plugin was affected by a CSRF security vulnerability.

Affects Plugins

Plugin icon
woo-address-book
Fixed in 1.6.0

References

CVE
CVE-2019-15770

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
8.8 (high)

Miscellaneous

Verified
No
WPVDB ID
6a9715e3-93dc-4c9b-b4e6-24c3e8b9a2f0

Timeline

Publicly Published
2019-08-23 (about 6 years ago)
Added
2019-08-29 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2023-11-07
Title
UserHeat Plugin < 1.1.11 - Settings Update via CSRF
Published
2023-05-22
Title
Mediamatic – Media Library Folders <= 2.8.1 - Cross-Site Request Forgery
Published
2025-04-09
Title
WordPress Events Calendar Plugin – connectDaily < 1.5.5 - Stored XSS via CSRF
Published
2024-01-02
Title
WP 2FA < 2.6.0 - Arbitrary Email Sending via CSRF
Published
2025-04-09
Title
Anant Addons for Elementor < 1.1.9 - Arbitrary Plugin Installation via CSRF