Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-47150 EUVD-2022-56006GHSA-h4fp-g858-4x8m

WordPress WooCommerce Conversion Tracking plugin <= 2.0.10 - Cross-Site Request Forgery (CSRF) vulnerability

Published Jun 11, 2026 · Updated Jun 11, 2026 · Assigned by Patchstack

Vendor: wedevs Product: WooCommerce Conversion Tracking Category: Web / CMS

Description

Cross-Site request forgery (CSRF) vulnerability in weDevs WooCommerce Conversion Tracking allows Cross Site Request Forgery.

This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.10.

Affected products

VendorProductAffectedFixed
weDevs WooCommerce Conversion Tracking ≤ 2.0.10 —

References