CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2022-46805

WordPress Conditional Payments for WooCommerce Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Status: Published
Published: 2023-03-01
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin <= 2.3.1 leading to activation/deactivation of plugin rulesets.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lauri Karisola / WP Trio Conditional Shipping for WooCommerce

Default version status: unaffected

n/a to ≤ 2.3.1affected

References

https://patchstack.com/database/vulnerability/conditional-payments-for-woocommerce/wordpress-conditional-payments-for-woocommerce-plugin-2-3-1-cross-site-request-forgery-csrf?_s_id=cve ↗