← CVE Intelligence

CVE-2022-2555

Yotpo Reviews for WooCommerce <= 2.0.4 - Arbitrary Settings Update via CSRF PUBLISHED

Description (CNA)

The Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which could allow attacker to make a logged in admin change them via a CSRF attack.

Affected (CNA)

Vendor / productVersions
Unknown / Yotpo Reviews for WooCommerce (Unofficial)affected 2.0.4 through 2.0.4

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.