CSRF Vulnerability in HUSKY – Products Filter for WooCommerce (formerly WOOF)
CVE-2024-30462

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Husky – Products Filter For WooCommerce (formerly Woof)
Vendor
CVE Published:
29 March 2024

What is CVE-2024-30462?

A CSRF vulnerability exists in remaig777 HUSKY – Products Filter for WooCommerce, affecting versions up to 1.3.5.1. This flaw allows attackers to trick users into submitting unauthorized requests, potentially compromising user actions on the site. Website administrators and users should ensure they are using the latest version of the plugin to mitigate this risk and protect their WordPress installations.

Affected Version(s)

HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.5.1

References

https://patchstack.com/database/vulnerability/woocommerce...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dhabaleshwar Das (Patchstack Alliance)
.