← CVE Intelligence

CVE-2022-4426

Mautic Integration For WooCommerce < 1.0.3 - Arbitrary Options Update via CSRF PUBLISHED

Description (CNA)

The Mautic Integration for WooCommerce WordPress plugin before 1.0.3 does not have proper CSRF check when updating settings, and does not ensure that the options to be updated belong to the plugin, allowing attackers to make a logged in admin change arbitrary blog options via a CSRF attack.

Affected (CNA)

Vendor / productVersions
Unknown / Mautic Integration for WooCommerceaffected 0 before 1.0.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.