Description
The Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which could allow attacker to make a logged in admin change them via a CSRF attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Yotpo Reviews for WooCommerce (Unofficial) | 2.0.4 – ≤ 2.0.4 | — |