Vendor
purpleturtlepro
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 4.3
WooCommerce Etsy Integration <= 3.3.1 - Cross-Site Request Forgery Bypass
The WooCommerce Etsy Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.1. This is due to missing or incorrect nonce validation on the etcpf_delete_feed() function. This makes it possible for una…