Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-47154 EUVD-2022-49929GHSA-4c88-rc57-94rf

WordPress CSS JS Manager Plugin <= 2.4.49 is vulnerable to Cross Site Request Forgery (CSRF)

Published Mar 14, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Pi Websolution CSS JS Manager, Async JavaScript, Defer Render Blocking CSS supports WooCommerce plugin <= 2.4.49 versions.

Affected products

VendorProductAffectedFixed
Pi Websolution CSS JS Manager, Async JavaScript, Defer Render Blocking CSS supports WooCommerce ≤ 2.4.49 —

References