CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce Brands for WooCommerce premmerce-woocommerce-brands allows Cross Site Request Forgery.This issue affects Premmerce Brands for WooCommerce: from n/a through <= 1.2.13.
Explanation of Vulnerability in Simple Terms
Premmerce Brands for WooCommerce versions 1.2.13 and earlier contain a cross-site request forgery (CSRF) vulnerability. An attacker can craft a malicious link or webpage that, when visited by a logged-in site administrator, performs unwanted actions on the plugin without the admin's knowledge or consent. The vulnerability requires user interaction but does not require authentication.
What an attacker can do
Perform unwanted actions on the plugin by tricking a logged-in admin into visiting a malicious page.
Potential impact on your site
An attacker can modify plugin settings or data if they trick your admin into clicking a malicious link.
Conditions required to exploit
Admin must visit attacker-controlled page while logged into WordPress.
Key dates
External resources
