WordPress Plugin Vulnerabilities

WooCommerce Product Table Lite < 3.1.0 - CSRF

Description

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Affects Plugins

Plugin icon
wc-product-table-lite
Fixed in 3.1.0

References

CVE
CVE-2023-47519

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
4.3 (medium)

Miscellaneous

Original Researcher
thiennv
Verified
No
WPVDB ID
de815723-6c70-4832-b278-b8b3664f2ad5

Timeline

Publicly Published
2023-11-07 (about 2 years ago)
Added
2023-11-22 (about 2 years ago)
Last Updated
2023-11-22 (about 2 years ago)

Other

Published
Title
Published
2014-08-01
Title
WP Easy Gallery 2.7 - Multiple Admin Function CSRF
Published
2024-12-11
Title
Amazon Product Price <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Published
2021-03-01
Title
Style Kits < 1.8.1 - Cross-Site Request Forgery
Published
2025-04-01
Title
JSON Structuring Markup <= 0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2024-05-09
Title
Unyson < 2.7.31 - Cross-Site Request Forgery