CVE-2023-41858: WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)
Published Oct 10, 2023
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin <= 1.2 versions.
Affected Software
1 affected component
tychesoftwares Order Delivery Date For Woocommerce Wordpress<=1.2
Event History
Oct 10, 2023
CVE Published
via MITRE·08:50 AM
Data Sourced
via MITRE·08:50 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-41858?
CVE-2023-41858 is a Cross-Site Request Forgery (CSRF) vulnerability in the Ashok Rane Order Delivery Date for WP e-Commerce plugin version 1.2 and below.
2
How severe is CVE-2023-41858?
CVE-2023-41858 has a severity rating of 8.8 (high).
3
Which software versions are affected by CVE-2023-41858?
The Ashok Rane Order Delivery Date for WP e-Commerce plugin versions up to and including 1.2 are affected by CVE-2023-41858.
4
What is Cross-Site Request Forgery (CSRF)?
Cross-Site Request Forgery (CSRF) is a type of attack that tricks the victim into performing unwanted actions on a website they trust.
5
How can I fix CVE-2023-41858?
To fix CVE-2023-41858, update the Ashok Rane Order Delivery Date for WP e-Commerce plugin to a version above 1.2.