CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in BinaryCarpenter Menu Bar Cart Icon For WooCommerce By Binary Carpenter.This issue affects Menu Bar Cart Icon For WooCommerce By Binary Carpenter: from n/a through 1.49.3.
Explanation of Vulnerability in Simple Terms
The Menu Bar Cart Icon For WooCommerce plugin through version 1.49.3 is vulnerable to cross-site request forgery (CSRF). An attacker can craft a malicious link or page that, when visited by a logged-in site administrator, performs unwanted actions on the WooCommerce store without the admin's knowledge or consent. This could allow unauthorized changes to cart settings or store configuration.
What an attacker can do
Perform unwanted actions on the WooCommerce store by tricking an admin into visiting a malicious page.
Potential impact on your site
An attacker could modify WooCommerce cart settings or store configuration without your permission.
Conditions required to exploit
Admin must visit a malicious link or page while logged into the WordPress site.
Key dates
External resources
Related vulnerabilities
