WordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerability
CVE-2022-40128

4.3MEDIUM

Key Information:

Vendor: WordPress
Status: Advanced Order Export For WooCommerce (WordPress Plugin)
Vendor: CVE Published:; 8 November 2022

Summary

Cross-Site Request Forgery (CSRF) vulnerability in Advanced Order Export For WooCommerce plugin <= 3.3.2 on WordPress leading to export file download.

Affected Version(s)

Advanced Order Export For WooCommerce (WordPress plugin) <= 3.3.2 <= 3.3.2

References

https://wordpress.org/plugins/woo-order-export-lite/

https://patchstack.com/database/vulnerability/woo-order-e...

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published
Nov 8, 2022
Vulnerability Reserved
Sep 27, 2022

Credit

Vulnerability discovered by Lana Codes (Patchstack Alliance)