CSRF Vulnerability in HUSKY – Products Filter for WooCommerce (formerly WOOF)
CVE-2024-30462

8.8HIGH

Key Information:

Vendor

WordPress
Status
Husky – Products Filter For WooCommerce (formerly Woof)
Vendor
CVE Published:
29 March 2024

What is CVE-2024-30462?

A CSRF vulnerability exists in remaig777 HUSKY – Products Filter for WooCommerce, affecting versions up to 1.3.5.1. This flaw allows attackers to trick users into submitting unauthorized requests, potentially compromising user actions on the site. Website administrators and users should ensure they are using the latest version of the plugin to mitigate this risk and protect their WordPress installations.

Affected Version(s)

HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.5.1

References

https://patchstack.com/database/vulnerability/woocommerce...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dhabaleshwar Das (Patchstack Alliance)
.