Description
Cross-Site Request Forgery (CSRF) vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams allows Cross Site Request Forgery.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through <= 2.2.0.
Published: 2025-12-31
Score: 4.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a Cross‑Site Request Forgery flaw in the Live Shopping & Shoppable Videos For WooCommerce plugin, allowing an attacker to forge requests that are executed with the privileges of the authenticated WordPress user. This can lead to unauthorized changes or actions performed on the website but does not directly provide code execution. The weakness is identified as CWE‑352.

Affected Systems

Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live‑shopping-video-streams plugin versions n/a through 2.2.0 are affected. Hosts running any of these versions are vulnerable.

Risk and Exploitability

The CVSS score of 4.3 indicates moderate overall risk. The EPSS score of <1% shows a very low likelihood of widespread exploitation at present. The vulnerability is not listed in the CISA KEV catalog. The most likely attack vector is a malicious webpage that tricks a logged‑in user into visiting a URL that triggers an unwanted request to the WordPress site.

Generated by OpenCVE AI on April 29, 2026 at 17:54 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Live Shopping & Shoppable Videos For WooCommerce plugin to the latest version (any release greater than 2.2.0).
  • If the plugin is no longer required, uninstall or disable it to remove the attack surface.
  • Configure a web application firewall or equivalent rule set to reject POST/GET requests to the plugin’s action endpoints that lack a valid CSRF token.

Generated by OpenCVE AI on April 29, 2026 at 17:54 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 28 Apr 2026 18:30:00 +0000

Type Values Removed Values Added
Description Cross-Site Request Forgery (CSRF) vulnerability in Channelize.io Team Live Shopping &amp; Shoppable Videos For WooCommerce live-shopping-video-streams allows Cross Site Request Forgery.This issue affects Live Shopping &amp; Shoppable Videos For WooCommerce: from n/a through <= 2.2.0. Cross-Site Request Forgery (CSRF) vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams allows Cross Site Request Forgery.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through <= 2.2.0.

Thu, 23 Apr 2026 15:00:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N'}

Wed, 01 Apr 2026 23:45:00 +0000

Type Values Removed Values Added
Description Cross-Site Request Forgery (CSRF) vulnerability in Channelize.Io Team Live Shopping & Shoppable Videos For WooCommerce allows Cross Site Request Forgery.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through 2.2.0. Cross-Site Request Forgery (CSRF) vulnerability in Channelize.io Team Live Shopping &amp; Shoppable Videos For WooCommerce live-shopping-video-streams allows Cross Site Request Forgery.This issue affects Live Shopping &amp; Shoppable Videos For WooCommerce: from n/a through <= 2.2.0.
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N'}

Tue, 20 Jan 2026 15:30:00 +0000

Type Values Removed Values Added
References

Tue, 20 Jan 2026 14:45:00 +0000

Type Values Removed Values Added
References

Mon, 05 Jan 2026 10:45:00 +0000

Type Values Removed Values Added
First Time appeared Channelize.io
Channelize.io live Shopping & Shoppable Videos For Woocommerce
Woocommerce
Woocommerce woocommerce
Wordpress
Wordpress wordpress
Vendors & Products Channelize.io
Channelize.io live Shopping & Shoppable Videos For Woocommerce
Woocommerce
Woocommerce woocommerce
Wordpress
Wordpress wordpress

Wed, 31 Dec 2025 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 31 Dec 2025 16:00:00 +0000

Type Values Removed Values Added
Description Cross-Site Request Forgery (CSRF) vulnerability in Channelize.Io Team Live Shopping & Shoppable Videos For WooCommerce allows Cross Site Request Forgery.This issue affects Live Shopping & Shoppable Videos For WooCommerce: from n/a through 2.2.0.
Title WordPress Live Shopping & Shoppable Videos For WooCommerce plugin <= 2.2.0 - Cross Site Request Forgery (CSRF) vulnerability
Weaknesses CWE-352
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N'}

Subscriptions

Channelize.io Live Shopping & Shoppable Videos For Woocommerce
Woocommerce Woocommerce
Wordpress Wordpress
cve-icon MITRE

Status: PUBLISHED

Assigner: Patchstack

Published:

Updated: 2026-04-28T16:14:00.900Z

Reserved: 2025-10-07T15:34:50.699Z

Link: CVE-2025-62080

cve-icon Vulnrichment

Updated: 2025-12-31T16:49:14.007Z

cve-icon NVD

Status : Deferred

Published: 2025-12-31T16:15:43.983

Modified: 2026-04-28T19:34:52.340

Link: CVE-2025-62080

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-29T18:00:13Z

Weaknesses