CVE-2023-49153

Published: Dec 18, 2023Modified: Apr 28, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Cross-Site Request Forgery (CSRF) vulnerability in Saiful Islam Add to Cart Text Changer and Customize Button, Add Custom Icon.This issue affects Add to Cart Text Changer and Customize Button, Add Custom Icon: from n/a through 2.0.

Affected (1)

Products: Codeastrology: Add To Cart Text Changer And Customize Button, Add Custom Icon

Codeastrology

1 product

Add To Cart Text Changer And Customize Button, Add Custom Icon

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Codeastrology Add To Cart Text Changer And Customize Button, Add Custom Icon	Up to 2.0

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

https://patchstack.com/database/vulnerability/woo-add-to-cart-text-change/wordpress-add-to-cart-text-changer-and-customize-button-add-custom-icon-plugin-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

Source: audit@patchstack.com

Third Party Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.