Medium · 4.3 CVE-2023-51678 EUVD-2023-56378GHSA-5ghg-77c4-pg6g

WordPress Doofinder for WooCommerce Plugin <= 2.0.33 is vulnerable to Broken Access Control

Published Jan 5, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Doofinder Product: Doofinder WP & WooCommerce Search Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.0.33.

Affected products

Vendor	Product	Affected	Fixed
Doofinder	Doofinder WP & WooCommerce Search	≤ 2.0.33	—

References

https://patchstack.com/database/vulnerability/doofinder-for-woocommerce/wordpress-doofinder-wp-woocommerce-search-plugin-2-0-33-broken-access-control-vulnerability?_s_id=cve vdb-entry