Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress leading to plugin settings import.
References
| Link | Resource |
|---|---|
| https://patchstack.com/database/vulnerability/advanced-dynamic-pricing-for-woocommerce/wordpress-advanced-dynamic-pricing-for-woocommerce-plugin-4-1-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve | Third Party Advisory |
| https://wordpress.org/plugins/advanced-dynamic-pricing-for-woocommerce/ | Product Release Notes Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
09 Nov 2022, 13:55
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:algolplus:advanced_dynamic_pricing_for_woocommerce:*:*:*:*:*:wordpress:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| References | (CONFIRM) https://wordpress.org/plugins/advanced-dynamic-pricing-for-woocommerce/ - Product, Release Notes, Third Party Advisory | |
| References | (CONFIRM) https://patchstack.com/database/vulnerability/advanced-dynamic-pricing-for-woocommerce/wordpress-advanced-dynamic-pricing-for-woocommerce-plugin-4-1-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve - Third Party Advisory | |
| CWE | CWE-352 |
08 Nov 2022, 19:25
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-11-08 19:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-43491
Mitre link : CVE-2022-43491
CVE.ORG link : CVE-2022-43491
JSON object : View
Products Affected
algolplus
- advanced_dynamic_pricing_for_woocommerce
CWE
CWE-352
Cross-Site Request Forgery (CSRF)