Cross-Site Request Forgery Vulnerability in Welcart Plugin for WordPress
CVE-2012-5178

Currently unrated

Key Information:

Vendor
Wordpress
Status
Welcart Plugin
Vendor
CVE Published:
19 December 2012

Summary

The Welcart plugin for WordPress contains a vulnerability that enables remote attackers to exploit cross-site request forgery (CSRF) weaknesses. This flaw could allow attackers to hijack user authentication, facilitating unauthorized purchase actions without the user's consent. Users of the affected plugin versions are urged to update to version 1.2.2 or later to mitigate this security risk.

References

http://www.welcart.com/community/archives/4524
x_refsource_CONFIRM
http://jvn.jp/en/jp/JVN53269985/index.html
third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000109
third-party-advisoryx_refsource_JVNDB

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.