Filtered by vendor Wpswings Subscriptions
Filtered by product Mautic Integration For Woocommerce Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-4426 1 Wpswings 1 Mautic Integration For Woocommerce 2024-08-03 4.3 Medium
The Mautic Integration for WooCommerce WordPress plugin before 1.0.3 does not have proper CSRF check when updating settings, and does not ensure that the options to be updated belong to the plugin, allowing attackers to make a logged in admin change arbitrary blog options via a CSRF attack.