Conditional Shipping For Woocommerce Vulnerabilities

The Conditional Shipping for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they c...

CVSS:

4.3

Affected:

up to 3.4.0

Fixed in:

3.4.1

Disclosed:

Apr 16, 2025

CVE-2025-39564 on NVD →

The Conditional Shipping for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.1. This is due to missing or incorrect nonce validation on the toggle_ruleset function. This makes it possible for unauthenticated attackers to invoke this function, via forged...

CVSS:

8.8

Affected:

up to 2.3.1

Fixed in:

2.3.2

Disclosed:

Dec 12, 2022

CVE-2022-46815 on NVD →