CVE-2022-4363 — Wholesale Market <= 2.2.2 - Settings Update via CSRF

CVE-2022-4363

Wholesale Market <= 2.2.2 - Settings Update via CSRF PUBLISHED

Description (CNA)

The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1 have a flawed CSRF check when updating their settings, which could allow attackers to make a logged in admin update them via a CSRF attack

Affected (CNA)

Vendor / product	Versions
Unknown / Wholesale Market	affected 0 before 2.2.2
Unknown / Wholesale Market for WooCommerce	affected 0 before 2.0.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/734dba0b-f550-4372-884a-d42f7b0c00c7/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.