Conditional Payments For Woocommerce Vulnerabilities

The Conditional Payments for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they c...

CVSS:

4.3

Affected:

up to 3.3.0

Fixed in:

3.3.1

Disclosed:

Apr 16, 2025

CVE-2025-39563 on NVD →

The Conditional Payments for WooCommerce plugin is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.1. This is due to missing or incorrect nonce validation on the 'toggle_ruleset' function. This makes it possible for unauthenticated attackers to enable or disable arbitrary rulesets via for...

CVSS:

5.4

Affected:

up to 2.3.1

Fixed in:

2.3.2

Disclosed:

Feb 14, 2023

CVE-2022-46805 on NVD →