4.3

CVE-2022-47150

WordPress WooCommerce Conversion Tracking plugin <= 2.0.10 - Cross-Site Request Forgery (CSRF) vulnerability

Appsero <= 1.2.0 - Cross-Site Request Forgery

Cross-Site request forgery (CSRF) vulnerability in weDevs WooCommerce Conversion Tracking allows Cross Site Request Forgery.

This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.10.
Mögliche Gegenmaßnahme
Bangladeshi Payment Gateways – Make Payment Using QR Code: Update to version 2.0.7, or a newer patched version
Boostify Header Footer Builder for Elementor: Update to version 1.2.9, or a newer patched version
Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD: Update to version 3.1.4, or a newer patched version
Click to top: Update to version 1.2.20, or a newer patched version
Markdown Editor (Formerly Dark Mode): Update to version 4.1.3, or a newer patched version
Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode & Accessibility Plugin: Update to version 2.1.2, or a newer patched version
Dashboard Welcome for Elementor: Update to version 1.0.7, or a newer patched version
Directorist: AI-Powered Business Directory, Listings & Classified Ads: Update to version 7.7.2, or a newer patched version
WP CTA – Call Now Button, Sticky Button & Call to Action Builder: Update to version 1.5.9, or a newer patched version
Easy Video Reviews – Testimonial Grid & Social Proof: Update to version 1.5.0, or a newer patched version
Exclusive Addons for Elementor: Update to version 2.6.2, or a newer patched version
Exclusive Team for Elementor: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Fuse Social Floating Sidebar: Update to version 5.4.7, or a newer patched version
Gallery Box: Update to version 1.7.31, or a newer patched version
GS Pinterest Portfolio – Pins Grid, Masonry, User Profile, Popup & Board Widgets: Update to version 1.6.3, or a newer patched version
Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews: Update to version 1.9.8, or a newer patched version
Happy Addons for Elementor: Update to version 3.8.3, or a newer patched version
Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator: Update to version 1.4.2, or a newer patched version
Magical Posts Display – Elementor Advanced Posts widgets: Update to version 1.2.16, or a newer patched version
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider: Update to version 3.28.1, or a newer patched version
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget: Update to version 1.6.4, or a newer patched version
PT Addons for Elementor Lite: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
FlexTable – Data Table Sync with Google Sheets: Update to version 2.12.15, or a newer patched version
Stax Addons for Elementor: Update to version 1.4.4, or a newer patched version
BuddyPress Builder for Elementor – BuddyBuilder: Update to version 1.7.2, or a newer patched version
Stylish Cost Calculator – Quote Generator, Lead Gen & Price Estimator: Update to version 7.3.7, or a newer patched version
Subscribe2 – Form, Email Subscribers & Newsletters: Update to version 10.38, or a newer patched version
Texty – SMS Notification for WordPress, WooCommerce, Dokan and more: Update to version 1.1.2, or a newer patched version
Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages: Update to version 1.0.2, or a newer patched version
Update Image Tag Alt Attribute: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Visibility Logic for Elementor: Update to version 2.3.4, or a newer patched version
W4 Post List: Update to version 2.4.3, or a newer patched version
Product Category Showcase for WooCommerce: Update to version 2.0.0, or a newer patched version
PDF Invoices & Packing Slips for WooCommerce – Challan: Update to version 3.4.9, or a newer patched version
FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet: Update to version 2.0.0, or a newer patched version
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker: Update to version 2.6.13, or a newer patched version
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot: Update to version 1.7.6, or a newer patched version
weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce: Update to version 1.14.2, or a newer patched version
wePOS – Point Of Sale (POS) for WooCommerce & Dokan: Update to version 1.2.6, or a newer patched version
Product Category Slider for WooCommerce: Update to version 4.1.6, or a newer patched version
Product Carousel Slider & Grid Ultimate for WooCommerce: Update to version 1.9.4, or a newer patched version
Product Gallery Slider, Additional Variation Images for WooCommerce: Update to version 2.2.7, or a newer patched version
Wiremo – Product Reviews for WooCommerce: Update to version 1.4.97, or a newer patched version
Conversion Tracking for WooCommerce: Update to version 2.0.11, or a newer patched version
Woostify Sites Library: Update to version 1.4.4, or a newer patched version
Worth The Read: Update to version 1.14.1, or a newer patched version
WP Dark Mode – Improve Accessibility with AI Powered Dark Theme: Update to version 3.0.5, or a newer patched version
WPEPP – Essential Security, Password Protect & Login Page Customizer: Update to version 1.2.4, or a newer patched version
WP Mail Logging: Update to version 1.11.0, or a newer patched version
EasyMedia – Increase Media Upload File Size | Role-Based Upload Limit | Increase Execution Time: Update to version 1.1.0, or a newer patched version
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission: Update to version 3.6.1, or a newer patched version
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell: Update to version 2.6.5, or a newer patched version
WP VR – 360 Panorama and Virtual Tour Builder: Update to version 8.2.6, or a newer patched version
Zero BS Accounting: Update to version 2.0.0, or a newer patched version
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerweDevs
≫
Produkt WooCommerce Conversion Tracking
Default Statusunaffected
Version <= 2.0.10
Version n/a
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Bangladeshi Payment Gateways – Make Payment Using QR Code
Version *-2.0.6
SystemWordPress Plugin
≫
Produkt Boostify Header Footer Builder for Elementor
Version *-1.2.8
SystemWordPress Plugin
≫
Produkt Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD
Version *-3.1.3
SystemWordPress Plugin
≫
Produkt Click to top
Version *-1.2.19
SystemWordPress Plugin
≫
Produkt Markdown Editor (Formerly Dark Mode)
Version *-4.1.2
SystemWordPress Plugin
≫
Produkt Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode & Accessibility Plugin
Version *-2.1.1
SystemWordPress Plugin
≫
Produkt Dashboard Welcome for Elementor
Version *-1.0.6
SystemWordPress Plugin
≫
Produkt Directorist: AI-Powered Business Directory, Listings & Classified Ads
Version *-7.7.1
SystemWordPress Plugin
≫
Produkt WP CTA – Call Now Button, Sticky Button & Call to Action Builder
Version *-1.5.8
SystemWordPress Plugin
≫
Produkt Easy Video Reviews – Testimonial Grid & Social Proof
Version *-1.4.2
SystemWordPress Plugin
≫
Produkt Exclusive Addons for Elementor
Version *-2.6.1
SystemWordPress Plugin
≫
Produkt Exclusive Team for Elementor
Version *-1.2.4
SystemWordPress Plugin
≫
Produkt Fuse Social Floating Sidebar
Version *-5.4.6
SystemWordPress Plugin
≫
Produkt Gallery Box
Version *-1.7.30
SystemWordPress Plugin
≫
Produkt GS Pinterest Portfolio – Pins Grid, Masonry, User Profile, Popup & Board Widgets
Version *-1.6.2
SystemWordPress Plugin
≫
Produkt Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews
Version *-1.9.7
SystemWordPress Plugin
≫
Produkt Happy Addons for Elementor
Version *-3.8.2
SystemWordPress Plugin
≫
Produkt Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator
Version *-1.4.1
SystemWordPress Plugin
≫
Produkt Magical Posts Display – Elementor Advanced Posts widgets
Version *-1.2.15
SystemWordPress Plugin
≫
Produkt Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider
Version *-3.28.0
SystemWordPress Plugin
≫
Produkt Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget
Version *-1.6.3
SystemWordPress Plugin
≫
Produkt PT Addons for Elementor Lite
Version *-2.2
SystemWordPress Plugin
≫
Produkt FlexTable – Data Table Sync with Google Sheets
Version *-2.12.14
SystemWordPress Plugin
≫
Produkt Stax Addons for Elementor
Version *-1.4.3
SystemWordPress Plugin
≫
Produkt BuddyPress Builder for Elementor – BuddyBuilder
Version *-1.7.1
SystemWordPress Plugin
≫
Produkt Stylish Cost Calculator – Quote Generator, Lead Gen & Price Estimator
Version *-7.3.6
SystemWordPress Plugin
≫
Produkt Subscribe2 – Form, Email Subscribers & Newsletters
Version *-10.37
SystemWordPress Plugin
≫
Produkt Texty – SMS Notification for WordPress, WooCommerce, Dokan and more
Version *-1.1.1
SystemWordPress Plugin
≫
Produkt Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages
Version *-1.0.1
SystemWordPress Plugin
≫
Produkt Update Image Tag Alt Attribute
Version *-2.4.3
SystemWordPress Plugin
≫
Produkt Visibility Logic for Elementor
Version *-2.3.3
SystemWordPress Plugin
≫
Produkt W4 Post List
Version *-2.4.2
SystemWordPress Plugin
≫
Produkt Product Category Showcase for WooCommerce
Version *-1.1.9
SystemWordPress Plugin
≫
Produkt PDF Invoices & Packing Slips for WooCommerce – Challan
Version *-3.4.8
SystemWordPress Plugin
≫
Produkt FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet
Version *-1.2.5
SystemWordPress Plugin
≫
Produkt Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker
Version *-2.6.12
SystemWordPress Plugin
≫
Produkt weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot
Version 1.6-1.7.5
SystemWordPress Plugin
≫
Produkt weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce
Version *-1.14.1
SystemWordPress Plugin
≫
Produkt wePOS – Point Of Sale (POS) for WooCommerce & Dokan
Version *-1.2.5
SystemWordPress Plugin
≫
Produkt Product Category Slider for WooCommerce
Version *-4.1.5
SystemWordPress Plugin
≫
Produkt Product Carousel Slider & Grid Ultimate for WooCommerce
Version *-1.9.3
SystemWordPress Plugin
≫
Produkt Product Gallery Slider, Additional Variation Images for WooCommerce
Version *-2.2.6
SystemWordPress Plugin
≫
Produkt Wiremo – Product Reviews for WooCommerce
Version *-1.4.96
SystemWordPress Plugin
≫
Produkt Conversion Tracking for WooCommerce
Version *-2.0.10
SystemWordPress Plugin
≫
Produkt Woostify Sites Library
Version *-1.4.3
SystemWordPress Plugin
≫
Produkt Worth The Read
Version *-1.14
SystemWordPress Plugin
≫
Produkt WP Dark Mode – Improve Accessibility with AI Powered Dark Theme
Version *-3.0.4
SystemWordPress Plugin
≫
Produkt WPEPP – Essential Security, Password Protect & Login Page Customizer
Version *-1.2.3
SystemWordPress Plugin
≫
Produkt WP Mail Logging
Version *-1.10.5
SystemWordPress Plugin
≫
Produkt EasyMedia – Increase Media Upload File Size | Role-Based Upload Limit | Increase Execution Time
Version *-1.0.9
SystemWordPress Plugin
≫
Produkt User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission
Version *-3.6.0
SystemWordPress Plugin
≫
Produkt WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
Version 2.6.4
SystemWordPress Plugin
≫
Produkt WP VR – 360 Panorama and Virtual Tour Builder
Version *-8.2.5
SystemWordPress Plugin
≫
Produkt Zero BS Accounting
Version *-1.0.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.017
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
audit@patchstack.com 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

https://patchstack.com/database/wordpress/plugin/woocommerce-conversion-tracking/vulnerability/wordpress-woocommerce-conversion-tracking-plugin-2-0-10-csrf-broken-access-control?_s_id=cve
https://www.wordfence.com/threat-intel/vulnerabilities/id/e869800a-6fbc-4a1a-97fd-92ecbf3305ff
Third Party Advisory