Medium severity6.5NVD Advisory· Published May 16, 2025· Updated Jun 17, 2026
CVE-2022-4363
CVE-2022-4363
Description
The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1 have a flawed CSRF check when updating their settings, which could allow attackers to make a logged in admin update them via a CSRF attack
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- Range: <2.0.1
<2.2.2+ 2 more
- (no CPE)range: <2.2.2
- (no CPE)
- (no CPE)
- cpe:2.3:a:cedcommerce:wholesale_market:*:*:*:*:*:wordpress:*:*Range: <2.2.2
- cpe:2.3:a:cedcommerce:wholesale_market_for_woocommerce:*:*:*:*:*:wordpress:*:*Range: <2.0.1
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/734dba0b-f550-4372-884a-d42f7b0c00c7/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.