Unscored CVE-2019-5979 EUVD-2019-15547GHSA-cpvf-h8c3-h6gw

Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and earlier allows remote attackers to hijack the…

Published Jul 5, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: N-Media Product: Personalized WooCommerce Cart Page Category: Web / CMS

Description

Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
N-MEDIA	Personalized WooCommerce Cart Page	2.4 and earlier	—

References

https://wordpress.org/plugins/personalize-woocommerce-cart-page/
https://jvn.jp/en/jp/JVN88804335/index.html
https://wpvulndb.com/vulnerabilities/9437