CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in CleverReach® Official CleverReach Plugin for WooCommerce cleverreach-wc allows Cross Site Request Forgery.This issue affects Official CleverReach Plugin for WooCommerce: from n/a through <= 3.4.6.
Explanation of Vulnerability in Simple Terms
The CleverReach Plugin for WooCommerce versions 3.4.6 and earlier are vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the site without their knowledge or consent. This could allow modification of plugin settings or other administrative functions.
What an attacker can do
Perform unwanted administrative actions on the site by tricking a logged-in admin into visiting a malicious webpage.
Potential impact on your site
An attacker can modify CleverReach plugin settings or perform other admin actions without your permission if you visit a compromised site.
Conditions required to exploit
A site administrator must visit a malicious webpage while logged into WordPress.
Key dates
External resources
Related vulnerabilities
