Cross-Site request forgery (CSRF) vulnerability in weDevs WooCommerce Conversion Tracking allows Cross Site Request Forgery.
This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.10.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Bangladeshi Payment Gateways Plugin | — | Update bangladeshi-payment-gateways plugin to version 2.0.7, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Boostify Header Footer Builder Plugin | — | Update boostify-header-footer-builder plugin to version 1.2.9, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Cart Lift Plugin | — | Update cart-lift plugin to version 3.1.4, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Click To Top Plugin | — | Update click-to-top plugin to version 1.2.20, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Dark Mode Plugin | — | Update dark-mode plugin to version 4.1.3, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Darklup Lite Wp Dark Mode Plugin | — | Update darklup-lite-wp-dark-mode plugin to version 2.1.2, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Dashboard Welcome For Elementor Plugin | — | Update dashboard-welcome-for-elementor plugin to version 1.0.7, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Directorist Plugin | — | Update directorist plugin to version 7.7.2, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Easy Sticky Sidebar Plugin | — | Update easy-sticky-sidebar plugin to version 1.5.9, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Easy Video Reviews Plugin | — | Update easy-video-reviews plugin to version 1.5.0, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Exclusive Addons For Elementor Plugin | — | Update exclusive-addons-for-elementor plugin to version 2.6.2, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Fuse Social Floating Sidebar Plugin | — | Update fuse-social-floating-sidebar plugin to version 5.4.7, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Gallery Box Plugin | — | Update gallery-box plugin to version 1.7.31, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Gs Pinterest Portfolio Plugin | — | Update gs-pinterest-portfolio plugin to version 1.6.3, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Gs Testimonial Plugin | — | Update gs-testimonial plugin to version 1.9.8, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Happy Elementor Addons Plugin | — | Update happy-elementor-addons plugin to version 3.8.3, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Legal Pages Plugin | — | Update legal-pages plugin to version 1.4.2, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Magical Posts Display Plugin | — | Update magical-posts-display plugin to version 1.2.16, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Ml Slider Plugin | — | Update ml-slider plugin to version 3.28.1, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Post Grid Carousel Ultimate Plugin | — | Update post-grid-carousel-ultimate plugin to version 1.6.4, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Sheets To Wp Table Live Sync Plugin | — | Update sheets-to-wp-table-live-sync plugin to version 2.12.15, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Stax Addons For Elementor Plugin | — | Update stax-addons-for-elementor plugin to version 1.4.4, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Stax Buddy Builder Plugin | — | Update stax-buddy-builder plugin to version 1.7.2, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Stylish Cost Calculator Plugin | — | Update stylish-cost-calculator plugin to version 7.3.7, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Subscribe2 Plugin | — | Update subscribe2 plugin to version 10.38, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Texty Plugin | — | Update texty plugin to version 1.1.2, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Unlimited Elementor Inner Sections By Boomdevs Plugin | — | Update unlimited-elementor-inner-sections-by-boomdevs plugin to version 1.0.2, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Visibility Logic Elementor Plugin | — | Update visibility-logic-elementor plugin to version 2.3.4, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| W4 Post List Plugin | — | Update w4-post-list plugin to version 2.4.3, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Wc Category Showcase Plugin | — | Update wc-category-showcase plugin to version 2.0.0, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Webappick Pdf Invoice For Woocommerce Plugin | — | Update webappick-pdf-invoice-for-woocommerce plugin to version 3.4.9, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Webinar And Video Conference With Jitsi Meet Plugin | — | Update webinar-and-video-conference-with-jitsi-meet plugin to version 2.0.0, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Wedevs Project Manager Plugin | — | Update wedevs-project-manager plugin to version 2.6.13, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Wedocs Plugin | — | Update wedocs plugin to version 1.7.6, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Wemail Plugin | — | Update wemail plugin to version 1.14.2, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Wepos Plugin | — | Update wepos plugin to version 1.2.6, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Woo Category Slider By Pluginever Plugin | — | Update woo-category-slider-by-pluginever plugin to version 4.1.6, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Woo Product Carousel Slider And Grid Ultimate Plugin | — | Update woo-product-carousel-slider-and-grid-ultimate plugin to version 1.9.4, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Woo Product Gallery Slider Plugin | — | Update woo-product-gallery-slider plugin to version 2.2.7, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Woo Reviews By Wiremo Plugin | — | Update woo-reviews-by-wiremo plugin to version 1.4.97, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Woocommerce Conversion Tracking Plugin | — | Update woocommerce-conversion-tracking plugin to version 2.0.11, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Woostify Sites Library Plugin | — | Update woostify-sites-library plugin to version 1.4.4, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Worth The Read Plugin | — | Update worth-the-read plugin to version 1.14.1, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Wp Dark Mode Plugin | — | Update wp-dark-mode plugin to version 3.0.5, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Wp Edit Password Protected Plugin | — | Update wp-edit-password-protected plugin to version 1.2.4, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Wp Mail Logging Plugin | — | Update wp-mail-logging plugin to version 1.11.0, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Wp Maximum Upload File Size Plugin | — | Update wp-maximum-upload-file-size plugin to version 1.1.0, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Wp User Frontend Plugin | — | Update wp-user-frontend plugin to version 3.6.1, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Wpfunnels Plugin | — | Update wpfunnels plugin to version 2.6.5, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Wpvr Plugin | — | Update wpvr plugin to version 8.2.6, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
| Zero Bs Accounting Plugin | — | Update zero-bs-accounting plugin to version 2.0.0, or a newer patched version | May 15, 2025 | Dec 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub