WooCommerce Address Book < 1.6.0 - Cross-Site Request Forgery
highThe woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks.
- CVSS:
- 8.8
- Affected:
- up to 1.6.0
- Fixed in:
- 1.6.0
- Disclosed:
- Aug 23, 2019
plugin
1 known security issue reported for the Woo Address Book WordPress plugin. Most recent disclosed Aug 23, 2019.
Running Woo Address Book on your site? Check whether your installed version is affected.
Scan your site freeThe woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free