Description
Cross-Site Request Forgery (CSRF) vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin <= 1.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ashok Rane | Order Delivery Date for WP e-Commerce | ≤ 1.2 | — |
Medium · 4.3
CVE-2023-41858
EUVD-2023-46349GHSA-522x-wr8w-r94g
WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)
Published Oct 10, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack