sync-basalam <= 1.9.1 - Cross-Site Request Forgery
mediumThe ووسلام – همگام سازی ووکامرس و باسلام plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.9.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged reque...
- CVSS:
- 4.3
- Affected:
- up to 1.9.1
- Fixed in:
- 1.9.2
- Disclosed:
- Jul 12, 2026