Medium · 5.4 CVE-2023-33316 EUVD-2023-37479GHSA-9hf8-4956-3qcv

WordPress WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 is vulnerable to Cross Site Request Forgery (CSRF)

Published May 28, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 versions.

Vendor	Product	Affected	Fixed
WooCommerce	WooCommerce Follow-Up Emails (AutomateWoo)	≤ 4.9.40	—