CVE-2022-2382
Product Slider for WooCommerce < 2.5.7 - Subscriber+ Arbitrary Options Deletion
- State
- Published
- Severity
- Not scored
- Published
- Aug 22, 2022
- Updated
- Aug 3, 2024
- Reserved
- Jul 11, 2022
Description
The Product Slider for WooCommerce WordPress plugin before 2.5.7 has flawed CSRF checks and lack authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber to call them. One in particular could allow them to delete arbitrary blog options.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Product Slider for WooCommerceUnknown |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.