CVE-2023-6292

Summary

CVE-2023-6292 is a vulnerability affecting the Ecwid Ecommerce Shopping Cart plugin for WordPress. Prior to version 6.12.5, this plugin lacked Cross-Site Request Forgery (CSRF) protection during setting updates. Consequently, an attacker could exploit this vulnerability to manipulate admin settings by tricking a logged-in user into clicking on a malicious link, posing a significant security risk for WordPress sites using the Ecwid plugin.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.