Unrated severityNVD Advisory· Published Jul 31, 2023· Updated Apr 23, 2025
WooCommerce Pre-Orders < 2.0.3 - Unauthorised Actions via CSRF
CVE-2023-3508
Description
The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when processing its tab actions, which could allow attackers to make logged in admins email pre-orders customer, change the released date, mark all pre-orders of a specific product as complete or cancel via CSRF attacks
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <2.0.3
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/064c7acb-db57-4537-8a6d-32f7ea31c738mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.