Medium · 4.3 CVE-2024-25930 EUVD-2024-23232GHSA-m59j-fh5q-v998

WordPress Custom Order Statuses for WooCommerce Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)

Published Feb 28, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Nuggethon Product: Custom Order Statuses for WooCommerce Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in Nuggethon Custom Order Statuses for WooCommerce.This issue affects Custom Order Statuses for WooCommerce: from n/a through 1.5.2.

Affected products

Vendor	Product	Affected	Fixed
Nuggethon	Custom Order Statuses for WooCommerce	≤ 1.5.2	—

References

https://patchstack.com/database/vulnerability/custom-order-statuses-for-woocommerce/wordpress-custom-order-statuses-for-woocommerce-plugin-1-5-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry