Komfortkasse For Woocommerce
Monthly
Cross-site request forgery in the Komfortkasse for WooCommerce WordPress plugin before 1.4.9 can let an unauthenticated remote attacker create a new administrator account and take over the site, but only if a logged-in administrator is induced to trigger a forged REST API request from their browser. The plugin overrides WordPress nonce verification, so the forged request needs no valid CSRF token; CVSS rates confidentiality, integrity and availability impact as high. A public PoC reference exists; it is not verified as working exploit code, EPSS is 0.10% (percentile 1%), and active exploitation is not confirmed.
Cross-site request forgery in the Komfortkasse for WooCommerce WordPress plugin before 1.4.9 can let an unauthenticated remote attacker create a new administrator account and take over the site, but only if a logged-in administrator is induced to trigger a forged REST API request from their browser. The plugin overrides WordPress nonce verification, so the forged request needs no valid CSRF token; CVSS rates confidentiality, integrity and availability impact as high. A public PoC reference exists; it is not verified as working exploit code, EPSS is 0.10% (percentile 1%), and active exploitation is not confirmed.