PT-2024-22713 · Unknown · Builder For Woocommerce Reviews Shortcodes – Reviewshort

Dhabaleshwar Das · Published 2024-03-19 · Updated 2024-03-21 · CVE-2024-29093

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Builder for WooCommerce reviews shortcodes – ReviewShort versions 1.01.3 and earlier

Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to perform unintended actions on a web application that a user is authenticated to.

Recommendations For versions 1.01.3 and earlier, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-29093

Affected Products

Builder For Woocommerce Reviews Shortcodes – Reviewshort

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-29093 · Security Note
• https://twitter.com/RedPacketSec/status/1770753783028453797 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/woo-product-reviews-shortcode/vulnerability/wordpress-builder-for-woocommerce-reviews-shortcodes-reviewshort-plugin-1-01-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/vulnerability/woo-product-reviews-shortcode/wordpress-builder-for-woocommerce-reviews-shortcodes-reviewshort-plugin-1-01-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1770131264596512798 · Twitter Post