Packagist/woocommerce/woocommerce CVE-2019-20891: high 8.8, EPSS 0.53%

WooCommerce Cross-Site Request Forgery (CSRF)

Action: Upgrade woocommerce/woocommerce to 3.6.5 or later.

composer require woocommerce/woocommerce:3.6.5

Affected

Fixed versions

Sources

• osv: GHSA-rcmf-88p4-9wrg
• https://nvd.nist.gov/vuln/detail/CVE-2019-20891
• https://github.com/woocommerce/woocommerce/commit/fd7feb778eb45a2eb92b45eb2b4ee96ea3ac6fe7
• https://blog.ripstech.com/2019/woocommerce-csrf-to-stored-xss
• https://github.com/woocommerce/woocommerce
• https://raw.githubusercontent.com/woocommerce/woocommerce/master/CHANGELOG.txt

CVE-2019-20891 · published 2022-05-24T17:21:15Z · modified 2024-02-16T08:23:28.608533Z · JSON