Medium · 5.4 CVE-2022-46856 EUVD-2022-49637GHSA-8hhr-c8gg-qq77

WordPress Woocommerce Product Designer Plugin <= 4.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

Published May 25, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ORION Product: Woocommerce Products Designer Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in ORION Woocommerce Products Designer plugin <= 4.3.3 versions.

Affected products

Vendor	Product	Affected	Fixed
ORION	Woocommerce Products Designer	≤ 4.3.3	—

References

https://patchstack.com/database/vulnerability/woocommerce-products-designer/wordpress-woocommerce-products-designer-by-orion-online-product-customizer-for-t-shirts-print-cards-phone-cases-lettering-decals-plugin-4-3-3-cross-site-request-forgery-csrf?_s_id=cve vdb-entry