Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-39564 EUVD-2025-11307GHSA-rgv7-v2jh-pv8v

WordPress Conditional Shipping for WooCommerce plugin <= 3.4.0 - Cross Site Request Forgery (CSRF) Vulnerability

Published Apr 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in WP Trio Conditional Shipping for WooCommerce conditional-shipping-for-woocommerce allows Cross Site Request Forgery.This issue affects Conditional Shipping for WooCommerce: from n/a through <= 3.4.0.

Affected products

VendorProductAffectedFixed
WP Trio Conditional Shipping for WooCommerce ≤ 3.4.0 —

References