Vulnerability · Published Sep 25, 2023 · Assigned by WPScan
CVE-2023-3547All in One B2B for WooCommerce <= 1.0.3 - Multiple CSRF
High 8.8
In plain English
A high-severity security flaw in All in One B2B for WooCommerce from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.4%top 66.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several actions, allowing an attacker to perform CSRF attacks.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | All in One B2B for WooCommerce | 0 – through 1.0.3 |
References
- https://wpscan.com/vulnerability/3cfb6696-18ad-4a38-9ca3-992f0b768b78 exploit, vdb-entry, technical-description