CVE-2024-3983

CVE-2024-3983: WooCommerce Customers Manager < 30.1 - Bulk Action via CSRF

Vendor Unknown
Product WooCommerce Customers Manager
Published August 1, 2024
Last update August 1, 2024

CVSS base score

What the vulnerability does

01Description

The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks

Key dates

02Disclosure timeline

August 1, 2024 CVE published
August 1, 2024 Record updated