Th All In One Woo Cart Vulnerabilities

The TH Side Cart and Menu Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the functions taiowc_form_setting, delete_settings. This makes it possible for unauthenticated attackers to modify plugin sett...

CVSS:

4.3

Affected:

up to 1.1.1

Fixed in:

1.1.2

Disclosed:

Mar 24, 2023

The TH Side Cart and Menu Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the functions taiowc_form_setting, delete_settings. This makes it possible for unauthenticated attackers to modify plugin sett...

Affected:

up to 1.1.2

Fixed in:

1.1.2

Disclosed:

Mar 24, 2023

The TH Side Cart and Menu Cart for Woocommerce plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the functions taiowc_form_setting, delete_settings in versions up to, and including, 1.1.1. This makes it possible for unauthenticated attackers to view or modif...

CVSS:

5.3

Affected:

up to 1.1.1

Fixed in:

1.1.2

Disclosed:

Mar 22, 2023

CVE-2023-25969 on NVD →

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Affected:

up to 1.1.2

Fixed in:

1.1.2

CVE-2023-25969 on NVD →