Description
The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several actions, allowing an attacker to perform CSRF attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | All in One B2B for WooCommerce | ≤ 1.0.3 | — |
References
- https://wpscan.com/vulnerability/3cfb6696-18ad-4a38-9ca3-992f0b768b78 exploit vdb-entry technical-description