CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in silverplugins217 Custom Fields Account Registration For Woocommerce custom-fields-account-registration-for-woocommerce allows Cross Site Request Forgery.This issue affects Custom Fields Account Registration For Woocommerce: from n/a through <= 1.1.
Explanation of Vulnerability in Simple Terms
Custom Fields Account Registration For WooCommerce versions 1.1 and earlier are vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the site without their knowledge. The vulnerability requires user interaction—the admin must visit the attacker's page—and affects only data integrity, not confidentiality or availability.
What an attacker can do
Trick a logged-in admin into performing unwanted actions via a malicious webpage.
Potential impact on your site
Attackers can modify site settings or data if they trick admins into visiting malicious links.
Conditions required to exploit
Admin must visit attacker-controlled page while logged into the site.
Key dates
External resources
