plugin
3 known security issues reported for the Woo Merchantx WordPress plugin. Most recent disclosed Jul 5, 2021.
Running Woo Merchantx on your site? Check whether your installed version is affected.
Scan your site freeThe Woo MerchantX plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'merchantx_stepOne_addBilling', 'merchantx_stepOne' and 'merchantx_deletePaymentMethod' functions. This makes it possible for unauthentica...
The Woo MerchantX plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'merchantx_stepOne_addBilling', 'merchantx_stepOne' and 'merchantx_deletePaymentMethod' functions. This makes it possible for unauthentica...
The plugin does not properly check for CSRF in its merchantx_stepOne_addBilling, merchantx_stepOne and merchantx_deletePaymentMethod functions, allowing attacker to make logged in users call them and perform unwanted actions.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free