CVE-2022-47150: WordPress WooCommerce Conversion Tracking plugin <= 2.0.10 - Cross-Site Req

WordPress WooCommerce Conversion Tracking plugin <= 2.0.10 - Cross-Site Request Forgery (CSRF) vulnerability

Status

Published

2026-06-11

Updated

2026-06-11

Assigning organization

Patchstack

Description

Cross-Site request forgery (CSRF) vulnerability in weDevs WooCommerce Conversion Tracking allows Cross Site Request Forgery. This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.10.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

weDevs WooCommerce Conversion Tracking

Default version status: unaffected

n/a to ≤ 2.0.10affected

References

https://patchstack.com/database/wordpress/plugin/woocommerce-conversion-tracking/vulnerability/wordpress-woocommerce-conversion-tracking-plugin-2-0-10-csrf-broken-access-control?_s_id=cve ↗