Woocommerce Tabs Plugin, Add Custom Product Tabs <= 1.0.1 - Cross-Site Request Forgery
high
The Woocommerce Tabs Plugin, Add Custom Product Tabs plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to edit session information via a...
- CVSS:
- 8.8
- Affected:
- up to 1.0.1
- Fix:
- No patched version reported
- Disclosed:
- Jun 30, 2021
Woocommerce Tabs Plugin, Add Custom Product Tabs [fma-products-tabs-pro] <= 1.0.1 (unfixed + closed)
unknown
The Woocommerce Tabs Plugin, Add Custom Product Tabs plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to edit session information via a...
- Affected:
- up to 1.0.1
- Fix:
- No patched version reported
- Disclosed:
- Jun 30, 2021
Woocommerce Tabs Plugin, Add Custom Product Tabs [fma-products-tabs-pro] <= 1.0.1 (unfixed + closed)
unknown
The plugin does not properly check for CSRF in its tab_session, tab_session_del, tab_session_edit and ptab_submit AJAX actions, allowing attacker to make logged in user call them via a CSRF attack
- Affected:
- up to 1.0.1
- Fix:
- No patched version reported
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database