CVE-2023-46078 – WordPress Serial Numbers for WooCommerce – License Manager Plugin <= 1.6.3 is vulnerable to Cross Site Request Forgery (CSRF)

https://notcve.org/view.php?id=CVE-2023-46078

16 Oct 2023 — Cross-Site Request Forgery (CSRF) vulnerability in PluginEver WC Serial Numbers plugin <= 1.6.3 versions. Vulnerabilidad de Cross-Site Request Forgery (CSRF) en el complemento PluginEver WC Serial Numbers en versiones <= 1.6.3. The Serial Numbers for WooCommerce – License Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.3. This is due to missing nonce validation on the process_bulk_actions function. This makes it possible for unauthenticated a... • https://patchstack.com/database/vulnerability/wc-serial-numbers/wordpress-serial-numbers-for-woocommerce-license-manager-plugin-1-6-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve • CWE-352: Cross-Site Request Forgery (CSRF) •