WordPress Plugin Vulnerabilities

Advanced Flat rate shipping Woocommerce < 1.6.4.6 - Cross-Site Request Forgery

Description

Cross-Site Request Forgery (CSRF) vulnerability in PI Websolution Conditional shipping & Advanced Flat rate shipping rates / Flexible shipping for WooCommerce shipping plugin <= 1.6.4.4 versions.

Affects Plugins

Plugin icon
advanced-free-flat-shipping-woocommerce
Fixed in 1.6.4.6

References

CVE
CVE-2023-34015

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
5.4 (medium)

Miscellaneous

Original Researcher
Skalucy
Verified
No
WPVDB ID
7aecccfb-11f6-4ab8-832a-155812ddbfd7

Timeline

Publicly Published
2023-07-11 (about 2 years ago)
Added
2023-07-11 (about 2 years ago)
Last Updated
2023-07-11 (about 2 years ago)

Other

Published
Title
Published
2021-03-10
Title
Database Backups <= 1.2.2.6 - CSRF to Backup Download
Published
2025-08-20
Title
ATT YouTube Widget <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2025-04-24
Title
Drop Caps <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2024-04-10
Title
USPS Shipping for WooCommerce – Live Rates < 1.9.3 - Cross-Site Request Forgery
Published
2025-05-07
Title
Martins Free Monetized Ad Exchange Network <= 1.0.6 - Stored XSS via CSRF