CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Saiful Islam Add to Cart Text Changer and Customize Button, Add Custom Icon.This issue affects Add to Cart Text Changer and Customize Button, Add Custom Icon: from n/a through 2.0.
Explanation of Vulnerability in Simple Terms
This WordPress plugin contains a cross-site request forgery (CSRF) vulnerability that allows attackers to perform unauthorized actions on behalf of site administrators. An attacker can craft a malicious link or page that, when visited by an admin, triggers unwanted changes to the plugin's settings. The vulnerability requires user interaction and affects plugin versions up to 2.0.
What an attacker can do
Trick an admin into visiting a malicious page to change the plugin's settings without their knowledge.
Potential impact on your site
Plugin settings can be altered by attackers if admins are socially engineered into visiting malicious links.
Conditions required to exploit
Admin must visit a page controlled by the attacker; no special authentication or access required from the attacker.
Key dates
External resources
Related vulnerabilities
