CVE-2023-5979

Summary

CVE-2023-5979 is a vulnerability affecting the eCommerce Product Catalog Plugin for WordPress before version 3.3.26. This issue allows attackers to carry out cross-site request forgery (CSRF) attacks on logged-in users, due to the lack of proper CSRF protection on certain admin pages. Successful exploitation could result in undesired actions, such as deletion of all products, causing significant damage to the affected website. Users are urged to update their plugin to the latest version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.