Medium · 4.3 CVE-2022-45367 EUVD-2022-48264GHSA-ccj6-gjpj-qp9x

WordPress Custom Order Numbers for WooCommerce Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Published May 25, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Tyche Softwares Custom Order Numbers for WooCommerce plugin <= 1.4.0 versions.

Vendor	Product	Affected	Fixed
Tyche Softwares	Custom Order Numbers for WooCommerce	≤ 1.4.0	—