CVE-2022-47150

MEDIUM

Cross-Site request forgery (CSRF) vulnerability in weDevs WooCommerce Conversion Tracking allows Cross Site Request Forgery. This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.10.

StatusDeferred

설명

Cross-Site request forgery (CSRF) vulnerability in weDevs WooCommerce Conversion Tracking allows Cross Site Request Forgery.

This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.10.

Score Summary

CVSS Score: 4.3
Version: 3.1
VPI: 43
Why this VPI (explainable, experimental)
VPI breakdown
Impact 43.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 43.00
VPI formula vpi-v1
EPSS: 0.1%
(상위 1.71%)
Attack Vector: Network
Low Complexity
No Privileges
User Interaction Required
Scope Unchanged
Low Confidentiality Impact
No Integrity Impact
No Availability Impact

Details

Published: 06/11/2026(last month)
Modified: 06/11/2026(last month)
Source: NVD

CWE Weakness Classification

CWE-352
NVD
Primary

References (1)

NVD
https://patchstack.com/database/wordpress/plugin/woocommerce-conversion-tracking/vulnerability/wordpress-woocommerce-conversion-tracking-plugin-2-0-10-csrf-broken-access-control?_s_id=cve

목록으로

Dashboard

Vulnerabilities

Impact	43.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	43.00