CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
What the vulnerability does
Cross-Site request forgery (CSRF) vulnerability in YITH YITH WooCommerce Product Slider Carousel allows Cross Site Request Forgery. This issue affects YITH WooCommerce Product Slider Carousel: from n/a through 1.16.0.
Explanation of Vulnerability in Simple Terms
The YITH WooCommerce Product Slider Carousel plugin through version 1.16.0 is vulnerable to cross-site request forgery (CSRF). An attacker can trick a logged-in site administrator into performing unintended actions by crafting a malicious link or page. The vulnerability requires the admin to click the link or visit the attacker's page while logged in to WordPress.
What an attacker can do
Trick a logged-in admin into performing unintended actions on the site without their knowledge.
Potential impact on your site
An attacker could modify plugin settings or data if they trick your admin into clicking a malicious link while logged in.
Conditions required to exploit
Admin must be logged into WordPress and click a malicious link or visit an attacker-controlled page.
Key dates
External resources
Related vulnerabilities
