CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in WP Swings Wallet System for WooCommerce wallet-system-for-woocommerce allows Cross Site Request Forgery.This issue affects Wallet System for WooCommerce: from n/a through <= 2.6.7.
Explanation of Vulnerability in Simple Terms
The Wallet System for WooCommerce plugin contains a cross-site request forgery (CSRF) vulnerability in versions up to 2.6.7. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the wallet system without the admin's knowledge or consent. This could allow unauthorized modifications to wallet settings or transactions.
What an attacker can do
Perform unwanted wallet actions on behalf of a logged-in administrator without their consent.
Potential impact on your site
Attackers could modify wallet settings or perform transactions if an admin visits a compromised page.
Conditions required to exploit
Administrator must visit a malicious webpage while logged into WordPress.
Key dates
External resources
Related vulnerabilities
