CVE-2022-1020 Scanner
Detects 'Cross-Site Request Forgery (CSRF)' vulnerability in WooCommerce wooproducttable plugin for Wordpress affects v. before 3.1.2.
Used 2.8k times · 3.3k assets checked · domain, ipv4, subdomain
CVE
CVE-2022-1020
9.8
CVSS
Description
The Product Table for WooCommerce (wooproducttable) WordPress plugin before 3.1.2 does not have authorisation and CSRF checks in the wpt_admin_update_notice_option AJAX action (available to both unauthenticated and authenticated users), as well as does not validate the callback parameter, allowing unauthenticated attackers to call arbitrary functions with either none or one user controlled argument
Attack Vector
-
Privileges Req.
-
User Interaction
-
product table for woocommerce (wooproducttable)
Updated Sep 26, 2026View on NVD →
S4E scanner
CVE history: product table for woocommerce (wooproducttable)
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →