nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-47634 CVE-2024-47634
MEDIUM
WordPress CartBounty plugin <= 8.2 - Cross Site Request Forgery (CSRF) vulnerability
Record summary
CVE-2024-47634 has a selected CVSS score of 5.4 (medium).
Description
Cross-Site Request Forgery (CSRF) vulnerability in Streamline CartBounty – Save and recover abandoned carts for WooCommerce woo-save-abandoned-carts allows Cross Site Request Forgery.This issue affects CartBounty – Save and recover abandoned carts for WooCommerce: from n/a through <= 8.2.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 21, 2024 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
CartBounty – Save and recover abandoned carts for WooCommerceBrowse Streamline / CartBounty – Save and recover abandoned carts for WooCommercewoo-save-abandoned-cartsDefault status: unaffected | CVE List | Through 8.2 | affected |
streamline.lvBrowse woocommerce / streamline.lvDefault status: unaffected | CVE List | Through 8.2 | affected |
References
3patchstack.comvdb entry
https://patchstack.com/database/Wordpress/Plugin/woo-save-abandoned-carts/vulnerability/wordpress-cartbounty-plugin-8-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve patchstack.com
https://patchstack.com/database/vulnerability/woo-save-abandoned-carts/wordpress-cartbounty-plugin-8-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve