← All advisories

Medium severity5.4NVD Advisory· Published Oct 4, 2023· Updated Jun 17, 2026

CVE-2023-40561

CVE-2023-40561

Description

Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin <= 3.7.1 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Thedotstore/Enhanced Ecommerce Google Analytics For Woocommercev5
Range: n/a
Multidots/Enhanced Ecommerce Google Analytics For Woocommerce
cpe:2.3:a:multidots:enhanced_ecommerce_google_analytics_for_woocommerce:*:*:*:*:*:wordpress:*:*
Range: <3.7.1
WordPress/Enhanced Ecommerce Google Analytics for WooCommercellm-create
Range: <=3.7.1

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/woo-ecommerce-tracking-for-google-and-facebook/wordpress-enhanced-ecommerce-google-analytics-for-woocommerce-plugin-3-7-1-cross-site-request-forgery-csrf-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.