Medium · 6.5 CVE-2023-41686 EUVD-2023-46178GHSA-jfr2-m965-cp8h

WordPress Woocommerce Support System plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability

Published Dec 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ilGhera Product: Woocommerce Support System Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in ilGhera Woocommerce Support System allows Cross Site Request Forgery.This issue affects Woocommerce Support System: from n/a through 1.2.2.

Affected products

Vendor	Product	Affected	Fixed
ilGhera	Woocommerce Support System	≤ 1.2.2	—

References

https://patchstack.com/database/wordpress/plugin/wc-support-system/vulnerability/wordpress-woocommerce-support-system-plugin-1-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry