← CVE Intelligence

CVE-2023-3507

WooCommerce Pre-Orders < 2.0.3 - Arbitrary Pre-Order Canceling via CSRF PUBLISHED

Description (CNA)

The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when canceling pre-orders, which could allow attackers to make logged in admins cancel arbitrary pre-orders via a CSRF attack

Affected (CNA)

Vendor / productVersions
Unknown / WooCommerce Pre-Ordersaffected 0 before 2.0.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.