Description
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Product Add-Ons plugin <= 6.1.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WooCommerce | Product Add-Ons | ≤ 6.1.3 | — |
Medium · 5.4
CVE-2023-32794
EUVD-2023-37015GHSA-4xv2-2hfw-7j9j
WordPress WooCommerce Product Add-ons Plugin <= 6.1.3 is vulnerable to Cross Site Request Forgery (CSRF)
Published Nov 9, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack