Medium · 5.4 CVE-2022-46806 EUVD-2022-49588GHSA-wqm8-3q2f-cr4h

WordPress Cart All In One For WooCommerce Plugin <= 1.1.10 is vulnerable to Cross Site Request Forgery (CSRF)

Published Mar 1, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Cart All In One For WooCommerce plugin <= 1.1.10 leading to cart modification.

Vendor	Product	Affected	Fixed
VillaTheme	Cart All In One For WooCommerce	≤ 1.1.10	—