CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
What the vulnerability does
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Viszt Péter's Integration for Szamlazz.hu & WooCommerce plugin <= 5.6.3.2 and Csomagpontok és szállítási címkék WooCommerce-hez plugin <= 1.9.0.2 on WordPress.
Explanation of Vulnerability in Simple Terms
The Integration for Szamlazz.hu & WooCommerce plugin for WordPress versions up to 5.6.3.2 is vulnerable to cross-site request forgery (CSRF). An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the site without the admin's knowledge or consent. This could result in unauthorized changes to plugin settings or WooCommerce configuration.
What an attacker can do
Trick a logged-in admin into performing unwanted actions on the site via a malicious webpage.
Potential impact on your site
Unauthorized changes to plugin settings or WooCommerce configuration if an admin visits a malicious link.
Conditions required to exploit
Admin must visit a malicious webpage while logged into WordPress.
Key dates
External resources
Related vulnerabilities
