Medium · 4.3 CVE-2022-46794 EUVD-2022-49576GHSA-mg3m-q73v-p23p

WordPress WooCommerce Weight Based Shipping Plugin <= 5.4.1 is vulnerable to Cross Site Request Forgery (CSRF)

Published May 24, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in weightbasedshipping.Com WooCommerce Weight Based Shipping plugin <= 5.4.1 versions.

Vendor	Product	Affected	Fixed
weightbasedshipping.com	WooCommerce Weight Based Shipping	≤ 5.4.1	—