The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some places, which could allow attackers to make logged in admin users delete users via CSRF attacks
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/fec4e077-4c4e-4618-bfe8-61fdba59b696/ | Exploit Third Party Advisory |
Configurations
History
29 May 2025, 17:23
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:vanquish:woocommerce_customers_manager:*:*:*:*:*:wordpress:*:* | |
| CWE | CWE-352 | |
| First Time |
Vanquish woocommerce Customers Manager
Vanquish |
|
| References | () https://wpscan.com/vulnerability/fec4e077-4c4e-4618-bfe8-61fdba59b696/ - Exploit, Third Party Advisory |
01 Aug 2024, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-01 06:15
Updated : 2025-05-29 17:23
NVD link : CVE-2024-2843
Mitre link : CVE-2024-2843
JSON object : View
Products Affected
vanquish
- woocommerce_customers_manager
CWE
CWE-352
Cross-Site Request Forgery (CSRF)