Unrated severityNVD Advisory· Published Jul 31, 2023· Updated Apr 23, 2025
WooCommerce Pre-Orders < 2.0.3 - Arbitrary Pre-Order Canceling via CSRF
CVE-2023-3507
Description
The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when canceling pre-orders, which could allow attackers to make logged in admins cancel arbitrary pre-orders via a CSRF attack
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <2.0.3
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/e72bbe9b-e51d-40ab-820d-404e0cb86ee6mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.