CVE-2024-2843

CVE-2024-2843: WooCommerce Customers Manager < 30.1 - User Deletion via CSRF

Vendor Unknown
Product WooCommerce Customers Manager
Published August 1, 2024
Last update August 7, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some places, which could allow attackers to make logged in admin users delete users via CSRF attacks

Key dates

02Disclosure timeline

August 1, 2024 CVE published
August 7, 2024 Record updated