CVE-2023-3547

Published: Sep 25, 2023Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several actions, allowing an attacker to perform CSRF attacks.

Affected (1)

Products: All In One B2b For Woocommerce Project: All In One B2b For Woocommerce

All In One B2b For Woocommerce Project

1 product

All In One B2b For Woocommerce

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
All In One B2b For Woocommerce Project All In One B2b For Woocommerce	version ≤ 1.0.3

References (2)

https://wpscan.com/vulnerability/3cfb6696-18ad-4a38-9ca3-992f0b768b78

Source: contact@wpscan.com

ExploitThird Party Advisory

https://wpscan.com/vulnerability/3cfb6696-18ad-4a38-9ca3-992f0b768b78

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.