CVE-2023-2329

Summary

CVE-2023-2329 is a vulnerability affecting the WooCommerce Google Sheet Connector plugin before version 1.3.6. This issue permits attackers to perform Cross-Site Request Forgery (CSRF) attacks, allowing them to alter the Access Code of the plugin for logged-in admin users. Consequently, attackers can gain unauthorized access to the plugin's settings, potentially leading to serious security implications for WordPress websites using this plugin. The vulnerability stems from the absence of CSRF protection during the Access Code update process.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.