CVE-2023-3547 — All in One B2B for WooCommerce <= 1.0.3 - Multiple CSRF
The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several actions, allowing an attacker to perform CSRF attacks.
Published: 2023-09-25 · CVSS: 8.8 · CVSS 3.1
The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several actions, allowing an attacker to perform CSRF attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7