Log out
Get PRO

Latest

Input validation vulnerability in Woocommerce Notify Updated Product 1.6

  • Severity: medium-risk
  • Status: Open
  • Publication: September 5, 2025

The Woocommerce Notify Updated Product plugin for WordPress is at risk for a type of attack called Cross-Site Request Forgery. This can happen in any version up to 1.6. The problem is caused by not properly checking for a special security code when a certain function is used. This means that someone who is not logged in could change settings and add harmful code to the website by tricking the person in charge of the website into doing something like clicking on a link.

Detected in:

Woocommerce Notify Updated Product open vulnerable versions: >= * <= 1.6

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.