Medium · 4.3 CVE-2023-49153 EUVD-2023-53158GHSA-www3-f92w-6cvf

WordPress Add to Cart Text Changer and Customize Button, Add Custom Icon Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Published Dec 18, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Saiful Islam Product: Add to Cart Text Changer and Customize Button, Add Custom Icon

Description

Cross-Site Request Forgery (CSRF) vulnerability in Saiful Islam Add to Cart Text Changer and Customize Button, Add Custom Icon.This issue affects Add to Cart Text Changer and Customize Button, Add Custom Icon: from n/a through 2.0.

Affected products

Vendor	Product	Affected	Fixed
Saiful Islam	Add to Cart Text Changer and Customize Button, Add Custom Icon	≤ 2.0	—

References

https://patchstack.com/database/vulnerability/woo-add-to-cart-text-change/wordpress-add-to-cart-text-changer-and-customize-button-add-custom-icon-plugin-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry