WooCommerce Customers Manager Plugin Vulnerable to CSRF Attacks
CVE-2024-3983
Currently unrated
What is CVE-2024-3983?
The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks
Affected Version(s)
WooCommerce Customers Manager 0 < 30.1
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.