WordPress Woocommerce Product Designer Plugin <= 4.3.3 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2022-46856

8.8HIGH

Key Information:

Vendor

WordPress
Status
WooCommerce Products Designer
Vendor
CVE Published:
25 May 2023

What is CVE-2022-46856?

The ORION Woocommerce Products Designer plugin for WordPress contains a Cross-Site Request Forgery (CSRF) vulnerability. This flaw allows an attacker to perform unauthorized actions on behalf of a user without their consent, potentially compromising site security. It affects versions up to 4.3.3, making it critical for users of this plugin to update and secure their websites to mitigate potential attacks.

Affected Version(s)

Woocommerce Products Designer <= 4.3.3

References

https://patchstack.com/database/vulnerability/woocommerce...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Cat (Patchstack Alliance)
.
CVE-2022-46856 : WordPress Woocommerce Product Designer Plugin <= 4.3.3 is vulnerable to Cross Site Request Forgery (CSRF)