CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in silverplugins217 Build Private Store For Woocommerce build-private-store-for-woocommerce allows Cross Site Request Forgery.This issue affects Build Private Store For Woocommerce: from n/a through <= 1.0.
Explanation of Vulnerability in Simple Terms
The Build Private Store For WooCommerce plugin version 1.0 and earlier contains a cross-site request forgery (CSRF) vulnerability. An attacker can craft a malicious link or webpage that, when visited by a logged-in site administrator, performs unwanted actions on the store without the admin's knowledge or consent. This could allow unauthorized changes to store settings or data.
What an attacker can do
Trick a logged-in admin into performing unwanted store actions via a malicious link or webpage.
Potential impact on your site
Store settings or data could be altered without your knowledge if an admin visits a malicious link.
Conditions required to exploit
Admin must visit attacker's link or webpage while logged into the site.
Key dates
External resources
Related vulnerabilities
