Cross-Site Request Forgery Vulnerability in WooCommerce Plugin

CVE-2024-2395

What is CVE-2024-2395?

The Bulgarisation for WooCommerce plugin for WordPress is susceptible to Cross-Site Request Forgery due to the lack of appropriate nonce validation across multiple functions. This vulnerability can be exploited by unauthenticated attackers who can potentially trick site administrators into executing unintended actions, such as generating or deleting labels, through malicious links.

References