← Back to CVE List

CVE-2023-2329

Published: 2023-07-17T14:15Z
Last Modified: 2024-11-21T07:58Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The WooCommerce Google Sheet Connector WordPress plugin before 1.3.6 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a CSRF attack > MITRE Terms of Use apply – see LICENSE‑MITRE.txt