Medium severity4.3NVD Advisory· Published Aug 22, 2022· Updated Jun 17, 2026
CVE-2022-2382
CVE-2022-2382
Description
The Product Slider for WooCommerce WordPress plugin before 2.5.7 has flawed CSRF checks and lack authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber to call them. One in particular could allow them to delete arbitrary blog options.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <2.5.7
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/777d4637-444b-4eda-bc21-95d3a3bf6cd3nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.