CVE-2022-43488

The Advanced Dynamic Pricing for WooCommerce plugin through version 4.1.5 contains a cross-site request forgery vulnerability affecting multiple data migration functions that lack proper nonce verification. An attacker can craft malicious requests that, if clicked by an administrator, would allow unauthorized modification of plugin settings. The vulnerability affects all versions prior to 4.1.6 and requires social engineering to trick an authenticated admin user into clicking a malicious link.

Based on public CVE data (MITRE/NVD).