CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in BeRocket Sequential Order Numbers for WooCommerce sequential-order-numbers-for-woocommerce allows Cross Site Request Forgery.This issue affects Sequential Order Numbers for WooCommerce: from n/a through <= 3.6.2.
Explanation of Vulnerability in Simple Terms
Sequential Order Numbers for WooCommerce versions up to 3.6.2 contain a cross-site request forgery vulnerability. An attacker can craft a malicious link or page that, when visited by a logged-in site administrator, performs unwanted actions on the store without the admin's knowledge. The vulnerability requires user interaction and does not expose sensitive data, but can modify store settings or data.
What an attacker can do
Trick a logged-in admin into performing unwanted actions on the store via a malicious link or page.
Potential impact on your site
Store settings or order data could be modified without the admin's consent if they click a malicious link.
Conditions required to exploit
Admin must visit a malicious link or page while logged into the site.
Key dates
External resources
Related vulnerabilities
