CVE-2024-2843

MEDIUM

WooCommerce Customers Manager < 30.1 - User Deletion via CSRF

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-2843 has a selected CVSS score of 6.5 (medium).

Description

The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some places, which could allow attackers to make logged in admin users delete users via CSRF attacks

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 7, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

WooCommerce Customers Manager

Default status: unaffected

CVE ListBefore 30.1affected

woocommerce_customers_manager

Browse woocommerce / woocommerce_customers_manager

Default status: unknown

CVE ListBefore 30.1affected

References

2