Vulnerabilities > CVE-2023-3547 - Unspecified vulnerability in ALL in ONE B2B for Woocommerce Project ALL in ONE B2B for Woocommerce 1.0.3

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH

Summary

The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several actions, allowing an attacker to perform CSRF attacks.