WordPress Woocommerce Support System plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability

CVE-2023-41686

What is CVE-2023-41686?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the ilGhera Woocommerce Support System. This flaw enables malicious actors to perform unauthorized actions on behalf of authenticated users without their consent. The issue affects various versions of Woocommerce Support System, notably from n/a up to 1.2.2, which may expose users to manipulation and exploitation. Users and administrators are advised to review their installations and apply necessary security measures to mitigate the risks associated with this vulnerability.

References