CVE-2022-4888: Multiple Plugins from Addify - Multiple CSRF
The Checkout Fields Manager WordPress plugin before 1.0.2, Abandoned Cart Recovery WordPress plugin before 1.2.5, Custom Fields for WooCommerce WordPress plugin before 1.0.4, Custom Order Number WordPress plugin through 1.0.1, Custom Registration Forms Builder WordPress plugin before 1.0.2, Advanced Free Gifts WordPress plugin before 1.0.2, Gift Registry for WooCommerce WordPress plugin through 1.0.1, Image Watermark for WooCommerce WordPress plugin before 1.0.1, Order Approval for WooCommerce WordPress plugin before 1.1.0, Order Tracking for WooCommerce WordPress plugin before 1.0.2, Price Calculator for WooCommerce WordPress plugin through 1.0.3, Product Dynamic Pricing and Discounts WordPress plugin through 1.0.6, Product Labels and Stickers WordPress plugin through 1.0.1 have flawed CSRF checks in various places, which could allow attackers to make logged in users perform unwanted actions
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-4888?
CVE-2022-4888 is a vulnerability in multiple WordPress plugins, including Addify Abandoned Cart Recovery, Addify Checkout Fields Manager, Addify Custom Fields For Woocommerce, Addify Custom Order Number, and Addify Custom Registration Forms Builder.
What is the severity of CVE-2022-4888?
The severity of CVE-2022-4888 is medium with a CVSS score of 6.5.
Which plugins are affected by CVE-2022-4888?
The plugins affected by CVE-2022-4888 include Addify Abandoned Cart Recovery, Addify Checkout Fields Manager, Addify Custom Fields For Woocommerce, Addify Custom Order Number, and Addify Custom Registration Forms Builder.
How can I fix CVE-2022-4888?
To fix CVE-2022-4888, you should update the affected WordPress plugins to the latest patched versions.
Where can I find more information about CVE-2022-4888?
You can find more information about CVE-2022-4888 at the following link: [link](https://wpscan.com/vulnerability/2c2379d0-e373-4587-a747-429d7ee8f6cc)