CVE-2022-2555

Summary

The Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which could allow attacker to make a logged in admin change them via a CSRF attack.

Affected Software

VendorProductVersion RangeStatus
UnknownYotpo Reviews for WooCommerce (Unofficial)2.0.4 <= 2.0.4affected

Weaknesses

  • CWE-352: CWE-352 Cross-Site Request Forgery (CSRF)

ADP Enrichment

CVE Program Container

Additional References

References