Skip to main content

Free Woocommerce Theme 99Fy Extension

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2023-0503 MEDIUM POC This Month

The Free WooCommerce Theme 99fy Extension WordPress plugin before 1.2.8 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress CSRF Free Woocommerce Theme 99Fy Extension
NVD WPScan
CVSS 3.1
4.3
EPSS
0.3%
CVE-2023-0503
EPSS 0% CVSS 4.3
MEDIUM POC This Month

The Free WooCommerce Theme 99fy Extension WordPress plugin before 1.2.8 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress CSRF Free Woocommerce Theme 99Fy Extension
NVD WPScan

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy