Files
CVEs-PoC/2022/CVE-2022-2555.md
T
2025-09-29 21:09:30 +02:00

845 B

CVE-2022-2555

Description

The Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which could allow attacker to make a logged in admin change them via a CSRF attack.

POC

Reference

Github