nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-3983 CVE-2024-3983
HIGH
WooCommerce Customers Manager < 30.1 - Bulk Action via CSRF
Record summary
CVE-2024-3983 has a selected CVSS score of 8.1 (high).
Description
The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 1, 2024 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
WooCommerce Customers ManagerDefault status: unaffected | CVE List | Before 30.1 | affected |
woocommerce_customers_managerBrowse woocommerce / woocommerce_customers_managerDefault status: unknown | CVE List | Before 30.1 | affected |
References
2wpscan.comexploitvdb entryTechnical description
https://wpscan.com/vulnerability/e4059d66-07b9-4f1a-a461-d6e8f0e98eec