Vulnerabilities > Wpswings > Mautic Integration FOR Woocommerce

DATE CVE VULNERABILITY TITLE RISK
2023-01-09 CVE-2022-4426 Unspecified vulnerability in Wpswings Mautic Integration for Woocommerce
The Mautic Integration for WooCommerce WordPress plugin before 1.0.3 does not have proper CSRF check when updating settings, and does not ensure that the options to be updated belong to the plugin, allowing attackers to make a logged in admin change arbitrary blog options via a CSRF attack.
network
low complexity
wpswings
4.3