CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. PayTR Taksit Tablosu – WooCommerce.This issue affects PayTR Taksit Tablosu – WooCommerce: from n/a through 1.3.1.
Explanation of Vulnerability in Simple Terms
The PayTR Taksit Tablosu WooCommerce plugin through version 1.3.1 is vulnerable to cross-site request forgery (CSRF). An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the site without their knowledge. This could allow modification of payment settings or other plugin configurations.
What an attacker can do
Trick a logged-in admin into modifying plugin settings or payment configuration via a malicious webpage.
Potential impact on your site
Attackers could alter payment settings, potentially disrupting transactions or redirecting payments.
Conditions required to exploit
Admin must visit attacker-controlled webpage while logged into WordPress.
Key dates
External resources
Related vulnerabilities
