medium6.8
CVE-2012-5178
Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to hijack the authentication of arbitr…
Impact
Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that complete a purchase.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Welcart | Welcart Plugin | through 1.2.1 Versions 0.5, 0.9.1 |