Yotpo Reviews For Woocommerce Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Yotpo Reviews For Woocommerce Project records in CISA KEV

No Yotpo Reviews For Woocommerce Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Yotpo Reviews For Woocommerce 1 record LOW

Records

1 record in Yotpo Reviews For Woocommerce · all components

TI-2022-02360 CVE-2022-2555 · GHSA-8qv6-fpqj-69wv

Yotpo Reviews for WooCommerce <= 2.0.4 - Arbitrary Settings Update via CSRF

LOW 29

The Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which could allow attacker to make a logged in admin change them via a CSRF attack.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00445 Published 2022-08-22 No fix listed CWE-352

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0