Vulnerability · Published Nov 18, 2022 · Assigned by Patchstack
CVE-2022-41685Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Integration for Szamlazz.hu & WooCommerce and Csomagpontok és szállítási címkék WooCommerce hez plugins
Medium 5.4
In plain English
A medium-severity cross-site request forgery in Csomagpontok és szállítási címkék WooCommerce-hez (WordPress plugin) from Viszt Péter. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 39% of all known vulnerabilities).
Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)0.5%top 60.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Viszt Péter's Integration for Szamlazz.hu & WooCommerce plugin <= 5.6.3.2 and Csomagpontok és szállítási címkék WooCommerce-hez plugin <= 1.9.0.2 on WordPress.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Viszt Péter | Integration for Szamlazz.hu & WooCommerce (WordPress plugin) | <= 5.6.3.2 – through 5.6.3.2 |
| Viszt Péter | Csomagpontok és szállítási címkék WooCommerce-hez (WordPress plugin) | <= 1.9.0.2 – through 1.9.0.2 |
Weakness: CWE-352 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
References
- https://patchstack.com/database/vulnerability/integration-for-szamlazzhu-woocommerce/wordpress-integration-for-szamlazz-hu-woocommerce-plugin-5-6-3-2-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cve
- https://patchstack.com/database/vulnerability/hungarian-pickup-points-for-woocommerce/wordpress-csomagpontok-es-szallitasi-cimkek-woocommerce-hez-plugin-1-9-0-2-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cve
- https://wordpress.org/plugins/hungarian-pickup-points-for-woocommerce/#developers
- https://wordpress.org/plugins/integration-for-szamlazzhu-woocommerce/#developers