Vulnerabilities > Woocommerce > Woocommerce PRE Orders > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-08-30 CVE-2023-32793 Unspecified vulnerability in Woocommerce Pre-Orders 1.9.0/2.0.0
Auth.
network
low complexity
woocommerce
5.4
2023-08-30 CVE-2023-32802 Unspecified vulnerability in Woocommerce Pre-Orders 1.9.0
Unauth.
network
low complexity
woocommerce
6.1
2023-07-31 CVE-2023-3507 Unspecified vulnerability in Woocommerce Pre-Orders 1.9.0/2.0.0
The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when canceling pre-orders, which could allow attackers to make logged in admins cancel arbitrary pre-orders via a CSRF attack
network
low complexity
woocommerce
6.5
2023-07-31 CVE-2023-3508 Unspecified vulnerability in Woocommerce Pre-Orders 1.9.0/2.0.0
The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when processing its tab actions, which could allow attackers to make logged in admins email pre-orders customer, change the released date, mark all pre-orders of a specific product as complete or cancel via CSRF attacks
network
low complexity
woocommerce
6.5