The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in the MULTIDOTS Woo Checkout for Digital Goods plugin 2.1 for WordPress. If an admin user can be tricked into visiting a crafted URL created by an attacker (via spear phishing/social engineering), the attacker can change the plugin settings. The function woo_checkout_settings_page in the file class-woo-checkout-for-digital-goods-admin.php doesn't do any check against wp-admin/admin-post.php Cross-site request forgery (CSRF) and user capabilities.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Woo Checkout For Digital Goods Plugin | — | Update woo-checkout-for-digital-goods plugin to version 2.2, or a newer patched version | May 15, 2025 | Jun 3, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub