CVE-2025-1362: easy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRF
The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1362?
CVE-2025-1362 has a medium severity level due to the potential for CSRF attacks impacting logged-in admin actions.
What versions are affected by CVE-2025-1362?
CVE-2025-1362 affects the WooCommerce WordPress plugin version up to and including 9.0.2.
How does CVE-2025-1362 exploit CSRF vulnerabilities?
CVE-2025-1362 allows attackers to exploit the lack of CSRF checks in bulk actions, enabling them to perform unauthorized actions on behalf of logged-in admins.
How do I fix CVE-2025-1362?
To fix CVE-2025-1362, update the WooCommerce WordPress plugin to a version beyond 9.0.2 where CSRF checks have been implemented.
What actions could be affected by CVE-2025-1362?
CVE-2025-1362 could allow attackers to manipulate bulk actions such as deleting customers without the admin's consent.