Vulnerability Details CVE-2023-6625
The Product Enquiry for WooCommerce WordPress plugin before 3.1 does not have a CSRF check in place when deleting inquiries, which could allow attackers to make a logged in admin delete them via a CSRF attack
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.2%
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2023-6625
-
cpe:2.3:a:gravitymaster:product_enquiry_for_woocommerce:3.0