CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in EditionGuard EditionGuard for WooCommerce – eBook Sales with DRM editionguard-for-woocommerce-ebook-sales-with-drm allows Privilege Escalation.This issue affects EditionGuard for WooCommerce – eBook Sales with DRM: from n/a through <= 3.4.2.
Explanation of Vulnerability in Simple Terms
EditionGuard for WooCommerce versions up to 3.4.2 contain a cross-site request forgery (CSRF) vulnerability. An attacker can craft a malicious link or page that, when visited by a logged-in site administrator, performs unauthorized actions on the site without their knowledge. This could allow the attacker to modify plugin settings, alter eBook DRM configurations, or perform other administrative functions.
What an attacker can do
Perform unauthorized administrative actions on the site by tricking a logged-in admin into visiting a malicious page.
Potential impact on your site
An attacker could change plugin settings, DRM configurations, or other admin functions without your permission or knowledge.
Conditions required to exploit
The site admin must be logged in and visit a page controlled by the attacker (via link, email, or social engineering).
Key dates
External resources
Related vulnerabilities
