CVE-2023-51486: WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.101 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Cross Site Request Forgery.This issue affects WooCommerce PDF Invoice Builder: from n/a through <= 1.2.101.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-51486?
CVE-2023-51486 is classified as a critical vulnerability due to its nature as a Cross-Site Request Forgery (CSRF) issue affecting the WooCommerce PDF Invoice Builder.
How do I fix CVE-2023-51486?
To fix CVE-2023-51486, it is recommended to update the WooCommerce PDF Invoice Builder plugin to version 1.2.102 or later, which addresses the CSRF vulnerability.
Which versions of WooCommerce PDF Invoice Builder are affected by CVE-2023-51486?
CVE-2023-51486 affects WooCommerce PDF Invoice Builder versions up to and including 1.2.101.
What kind of attacks can be executed due to CVE-2023-51486?
Due to CVE-2023-51486, attackers can potentially execute unauthorized actions on behalf of authenticated users, leading to data exposure or manipulation.
Is user authentication required to exploit CVE-2023-51486?
No, CVE-2023-51486 can be exploited without user authentication, making it particularly dangerous.