Medium · 5.4 CVE-2022-46815 EUVD-2022-49597GHSA-27jr-vp8c-qhvq

WordPress Conditional Shipping for WooCommerce Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Published Feb 2, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin <= 2.3.1 versions.

Vendor	Product	Affected	Fixed
Lauri Karisola / WP Trio	Conditional Shipping for WooCommerce	≤ 2.3.1	—