Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Advanced Local Pickup for WooCommerce 1.5.2

  • Severity: medium-risk
  • Status: Open
  • Publication: March 31, 2023

The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions prior to 1.5.2. This vulnerability is caused by the lack of, or incorrect, nonce validation on certain functions. This means that unauthenticated attackers can use forged requests to alter the plugin settings, if they can get a site administrator to take an action, such as clicking on a link.

Detected in:

Zorem Local Pickup fixed vulnerable versions:
Advanced Local Pickup for WooCommerce open vulnerable versions: >= * <= 1.5.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.