CVE · Medium

CVE-2023-52222 — WooCommerce [woocommerce] < 8.3.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-52222 WooCommerce [woocommerce] < 8.3.0 Cross-Site Request Forgery (CSRF) Medium 4.3 < 8.3.0 8.3.0 2024-01-05

CVE-2023-52222

The WooCommerce plugin before version 8.3.0 contains a cross-site request forgery vulnerability that could enable attackers to trick authenticated users into performing unintended actions on their behalf. A researcher identified and disclosed this flaw, which affects installations running versions prior to 8.3.0. The vulnerability was resolved in version 8.3.0 and later releases.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.