CVE Database /
CVE-2024-22155
CVE · Medium
CVE-2024-22155 — WooCommerce [woocommerce] < 8.6.0
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-22155
|
WooCommerce [woocommerce] < 8.6.0 |
Cross-Site Request Forgery (CSRF) |
Medium
4.3
|
< 8.6.0
|
8.6.0 |
2024-04-05 |
—
|
CVE-2024-22155
The WooCommerce plugin before version 8.6.0 contains a cross-site request forgery flaw that was discovered by Dhabaleshwar Das. An attacker could exploit this vulnerability to trick authenticated users with higher privileges into performing unintended actions while logged in. The issue has been resolved in version 8.6.0 and later releases.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings