medium6.5
CVE-2022-4363
The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1 have a flawed CSRF check when updating their…
Impact
The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1 have a flawed CSRF check when updating their settings, which could allow attackers to make a logged in admin update them via a CSRF attack
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cedcommerce | Wholesale Market | before 2.2.2 |
| Cedcommerce | Wholesale Market For Woocommerce | before 2.0.1 |