{"schemaVersion":3,"id":"CVE-2022-47150","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Cross-Site request forgery (CSRF) vulnerability in weDevs WooCommerce Conversion Tracking allows Cross Site Request Forgery.\n\nThis issue affects WooCommerce Conversion Tracking: from n/a through 2.0.10.","dates":{"published":"2026-06-11T10:43:01.912Z","modified":"2026-06-11T12:25:01.706Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":4.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"wordfence","score":4.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00113,"percentile":0.01353,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00113},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00113,"percentile":0.01353}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00113,"percentile":0.01353}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-352","name":"Cross-Site Request Forgery (CSRF)","description":"The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.","type":"weakness","status":"Stable","abstraction":"Compound","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/352.html"}],"affected":[{"vendor":"wedevs","product":"woocommerce_conversion_tracking","name":"woocommerce conversion tracking","label":"woocommerce_conversion_tracking","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ n/a, ≤ 2.0.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ n/a, ≤ 2.0.10","eol":null,"hubHref":"/vendor/wedevs/woocommerce_conversion_tracking"},{"vendor":"wordpress","product":"bangladeshi-payment-gateways","name":"Bangladeshi Payment Gateways – Make Payment Using QR Code","label":"bangladeshi-payment-gateways","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.0.6 (fixed in 2.0.7)","noFixRecorded":false,"fixedIn":"2.0.7"}],"versionsText":"≤ 2.0.6 (fixed in 2.0.7)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"boostify-header-footer-builder","name":"Boostify Header Footer Builder for Elementor","label":"boostify-header-footer-builder","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.2.8 (fixed in 1.2.9)","noFixRecorded":false,"fixedIn":"1.2.9"}],"versionsText":"≤ 1.2.8 (fixed in 1.2.9)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"cart-lift","name":"Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD","label":"cart-lift","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.1.3 (fixed in 3.1.4)","noFixRecorded":false,"fixedIn":"3.1.4"}],"versionsText":"≤ 3.1.3 (fixed in 3.1.4)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"click-to-top","name":"Click to top","label":"click-to-top","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.2.19 (fixed in 1.2.20)","noFixRecorded":false,"fixedIn":"1.2.20"}],"versionsText":"≤ 1.2.19 (fixed in 1.2.20)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"dark-mode","name":"Markdown Editor (Formerly Dark Mode)","label":"dark-mode","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.1.2 (fixed in 4.1.3)","noFixRecorded":false,"fixedIn":"4.1.3"}],"versionsText":"≤ 4.1.2 (fixed in 4.1.3)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"darklup-lite-wp-dark-mode","name":"Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode & Accessibility Plugin","label":"darklup-lite-wp-dark-mode","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.1.1 (fixed in 2.1.2)","noFixRecorded":false,"fixedIn":"2.1.2"}],"versionsText":"≤ 2.1.1 (fixed in 2.1.2)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"dashboard-welcome-for-elementor","name":"Dashboard Welcome for Elementor","label":"dashboard-welcome-for-elementor","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.0.6 (fixed in 1.0.7)","noFixRecorded":false,"fixedIn":"1.0.7"}],"versionsText":"≤ 1.0.6 (fixed in 1.0.7)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"directorist","name":"Directorist: AI-Powered Business Directory, Listings & Classified Ads","label":"directorist","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 7.7.1 (fixed in 7.7.2)","noFixRecorded":false,"fixedIn":"7.7.2"}],"versionsText":"≤ 7.7.1 (fixed in 7.7.2)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"easy-sticky-sidebar","name":"WP CTA – Call Now Button, Sticky Button & Call to Action Builder","label":"easy-sticky-sidebar","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.5.8 (fixed in 1.5.9)","noFixRecorded":false,"fixedIn":"1.5.9"}],"versionsText":"≤ 1.5.8 (fixed in 1.5.9)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"easy-video-reviews","name":"Easy Video Reviews – Testimonial Grid & Social Proof","label":"easy-video-reviews","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.4.2 (fixed in 1.5.0)","noFixRecorded":false,"fixedIn":"1.5.0"}],"versionsText":"≤ 1.4.2 (fixed in 1.5.0)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"exclusive-addons-for-elementor","name":"Exclusive Addons for Elementor","label":"exclusive-addons-for-elementor","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.6.1 (fixed in 2.6.2)","noFixRecorded":false,"fixedIn":"2.6.2"}],"versionsText":"≤ 2.6.1 (fixed in 2.6.2)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"exclusive-team-for-elementor","name":"Exclusive Team for Elementor","label":"exclusive-team-for-elementor","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.2.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.2.4","eol":null,"hubHref":null},{"vendor":"wordpress","product":"fuse-social-floating-sidebar","name":"Fuse Social Icons","label":"fuse-social-floating-sidebar","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 5.4.6 (fixed in 5.4.7)","noFixRecorded":false,"fixedIn":"5.4.7"}],"versionsText":"≤ 5.4.6 (fixed in 5.4.7)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"gallery-box","name":"Gallery Box","label":"gallery-box","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.7.30 (fixed in 1.7.31)","noFixRecorded":false,"fixedIn":"1.7.31"}],"versionsText":"≤ 1.7.30 (fixed in 1.7.31)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"gs-pinterest-portfolio","name":"GS Pinterest Portfolio – Pins Grid, Masonry, User Profile, Popup & Board Widgets","label":"gs-pinterest-portfolio","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.6.2 (fixed in 1.6.3)","noFixRecorded":false,"fixedIn":"1.6.3"}],"versionsText":"≤ 1.6.2 (fixed in 1.6.3)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"gs-testimonial","name":"Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews","label":"gs-testimonial","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.9.7 (fixed in 1.9.8)","noFixRecorded":false,"fixedIn":"1.9.8"}],"versionsText":"≤ 1.9.7 (fixed in 1.9.8)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"happy-elementor-addons","name":"HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates","label":"happy-elementor-addons","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.8.2 (fixed in 3.8.3)","noFixRecorded":false,"fixedIn":"3.8.3"}],"versionsText":"≤ 3.8.2 (fixed in 3.8.3)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"legal-pages","name":"Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator","label":"legal-pages","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.4.1 (fixed in 1.4.2)","noFixRecorded":false,"fixedIn":"1.4.2"}],"versionsText":"≤ 1.4.1 (fixed in 1.4.2)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"magical-posts-display","name":"Magical Posts Display – Elementor Advanced Posts widgets","label":"magical-posts-display","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.2.15 (fixed in 1.2.16)","noFixRecorded":false,"fixedIn":"1.2.16"}],"versionsText":"≤ 1.2.15 (fixed in 1.2.16)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"ml-slider","name":"Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider","label":"ml-slider","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.28.0 (fixed in 3.28.1)","noFixRecorded":false,"fixedIn":"3.28.1"}],"versionsText":"≤ 3.28.0 (fixed in 3.28.1)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"post-grid-carousel-ultimate","name":"Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget","label":"post-grid-carousel-ultimate","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.6.3 (fixed in 1.6.4)","noFixRecorded":false,"fixedIn":"1.6.4"}],"versionsText":"≤ 1.6.3 (fixed in 1.6.4)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"pt-elementor-addons-lite","name":"PT Addons for Elementor Lite","label":"pt-elementor-addons-lite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.2","eol":null,"hubHref":null},{"vendor":"wordpress","product":"sheets-to-wp-table-live-sync","name":"FlexTable – Data Table Sync with Google Sheets","label":"sheets-to-wp-table-live-sync","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.12.14 (fixed in 2.12.15)","noFixRecorded":false,"fixedIn":"2.12.15"}],"versionsText":"≤ 2.12.14 (fixed in 2.12.15)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"stax-addons-for-elementor","name":"Stax Addons for Elementor","label":"stax-addons-for-elementor","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.4.3 (fixed in 1.4.4)","noFixRecorded":false,"fixedIn":"1.4.4"}],"versionsText":"≤ 1.4.3 (fixed in 1.4.4)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"stax-buddy-builder","name":"BuddyPress Builder for Elementor – BuddyBuilder","label":"stax-buddy-builder","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.7.1 (fixed in 1.7.2)","noFixRecorded":false,"fixedIn":"1.7.2"}],"versionsText":"≤ 1.7.1 (fixed in 1.7.2)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"stylish-cost-calculator","name":"Stylish Cost Calculator – Quote Generator, Lead Gen & Price Estimator","label":"stylish-cost-calculator","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 7.3.6 (fixed in 7.3.7)","noFixRecorded":false,"fixedIn":"7.3.7"}],"versionsText":"≤ 7.3.6 (fixed in 7.3.7)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"subscribe2","name":"Subscribe2 – Form, Email Subscribers & Newsletters","label":"subscribe2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 10.37 (fixed in 10.38)","noFixRecorded":false,"fixedIn":"10.38"}],"versionsText":"≤ 10.37 (fixed in 10.38)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"texty","name":"Texty – SMS Notification for WordPress, WooCommerce, Dokan and more","label":"texty","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.1.1 (fixed in 1.1.2)","noFixRecorded":false,"fixedIn":"1.1.2"}],"versionsText":"≤ 1.1.1 (fixed in 1.1.2)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"unlimited-elementor-inner-sections-by-boomdevs","name":"Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages","label":"unlimited-elementor-inner-sections-by-boomdevs","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.0.1 (fixed in 1.0.2)","noFixRecorded":false,"fixedIn":"1.0.2"}],"versionsText":"≤ 1.0.1 (fixed in 1.0.2)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"update-alt-attribute","name":"Update Image Tag Alt Attribute","label":"update-alt-attribute","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.4.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.4.3","eol":null,"hubHref":null},{"vendor":"wordpress","product":"visibility-logic-elementor","name":"Visibility Logic for Elementor","label":"visibility-logic-elementor","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.3.3 (fixed in 2.3.4)","noFixRecorded":false,"fixedIn":"2.3.4"}],"versionsText":"≤ 2.3.3 (fixed in 2.3.4)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"w4-post-list","name":"W4 Post List","label":"w4-post-list","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.4.2 (fixed in 2.4.3)","noFixRecorded":false,"fixedIn":"2.4.3"}],"versionsText":"≤ 2.4.2 (fixed in 2.4.3)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"wc-category-showcase","name":"Product Category Showcase for WooCommerce","label":"wc-category-showcase","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.1.9 (fixed in 2.0.0)","noFixRecorded":false,"fixedIn":"2.0.0"}],"versionsText":"≤ 1.1.9 (fixed in 2.0.0)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"webappick-pdf-invoice-for-woocommerce","name":"PDF Invoices & Packing Slips for WooCommerce – Challan","label":"webappick-pdf-invoice-for-woocommerce","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.4.8 (fixed in 3.4.9)","noFixRecorded":false,"fixedIn":"3.4.9"}],"versionsText":"≤ 3.4.8 (fixed in 3.4.9)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"webinar-and-video-conference-with-jitsi-meet","name":"FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet","label":"webinar-and-video-conference-with-jitsi-meet","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.2.5 (fixed in 2.0.0)","noFixRecorded":false,"fixedIn":"2.0.0"}],"versionsText":"≤ 1.2.5 (fixed in 2.0.0)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"wedevs-project-manager","name":"Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker","label":"wedevs-project-manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.6.12 (fixed in 2.6.13)","noFixRecorded":false,"fixedIn":"2.6.13"}],"versionsText":"≤ 2.6.12 (fixed in 2.6.13)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"wedocs","name":"weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot","label":"wedocs","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.6, ≤ 1.7.5 (fixed in 1.7.6)","noFixRecorded":false,"fixedIn":"1.7.6"}],"versionsText":"≥ 1.6, ≤ 1.7.5 (fixed in 1.7.6)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"wemail","name":"weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce","label":"wemail","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.14.1 (fixed in 1.14.2)","noFixRecorded":false,"fixedIn":"1.14.2"}],"versionsText":"≤ 1.14.1 (fixed in 1.14.2)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"wepos","name":"wePOS – Point Of Sale (POS) for WooCommerce & Dokan","label":"wepos","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.2.5 (fixed in 1.2.6)","noFixRecorded":false,"fixedIn":"1.2.6"}],"versionsText":"≤ 1.2.5 (fixed in 1.2.6)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"woo-category-slider-by-pluginever","name":"Product Category Slider for WooCommerce","label":"woo-category-slider-by-pluginever","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.1.5 (fixed in 4.1.6)","noFixRecorded":false,"fixedIn":"4.1.6"}],"versionsText":"≤ 4.1.5 (fixed in 4.1.6)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"woo-product-carousel-slider-and-grid-ultimate","name":"Product Carousel Slider & Grid Ultimate for WooCommerce","label":"woo-product-carousel-slider-and-grid-ultimate","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.9.3 (fixed in 1.9.4)","noFixRecorded":false,"fixedIn":"1.9.4"}],"versionsText":"≤ 1.9.3 (fixed in 1.9.4)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"woo-product-gallery-slider","name":"Product Gallery Slider, Additional Variation Images for WooCommerce","label":"woo-product-gallery-slider","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.2.6 (fixed in 2.2.7)","noFixRecorded":false,"fixedIn":"2.2.7"}],"versionsText":"≤ 2.2.6 (fixed in 2.2.7)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"woo-reviews-by-wiremo","name":"Wiremo – Product Reviews for WooCommerce","label":"woo-reviews-by-wiremo","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.4.96 (fixed in 1.4.97)","noFixRecorded":false,"fixedIn":"1.4.97"}],"versionsText":"≤ 1.4.96 (fixed in 1.4.97)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"woocommerce-conversion-tracking","name":"Conversion Tracking for WooCommerce","label":"woocommerce-conversion-tracking","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.0.10 (fixed in 2.0.11)","noFixRecorded":false,"fixedIn":"2.0.11"}],"versionsText":"≤ 2.0.10 (fixed in 2.0.11)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"woostify-sites-library","name":"Woostify Sites Library","label":"woostify-sites-library","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.4.3 (fixed in 1.4.4)","noFixRecorded":false,"fixedIn":"1.4.4"}],"versionsText":"≤ 1.4.3 (fixed in 1.4.4)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"worth-the-read","name":"Worth The Read","label":"worth-the-read","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.14 (fixed in 1.14.1)","noFixRecorded":false,"fixedIn":"1.14.1"}],"versionsText":"≤ 1.14 (fixed in 1.14.1)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"wp-dark-mode","name":"Dark Mode – Improve Accessibility with AI Powered Dark Theme","label":"wp-dark-mode","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.0.4 (fixed in 3.0.5)","noFixRecorded":false,"fixedIn":"3.0.5"}],"versionsText":"≤ 3.0.4 (fixed in 3.0.5)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"wp-edit-password-protected","name":"WPEPP – Essential Security, Password Protect & Login Page Customizer","label":"wp-edit-password-protected","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.2.3 (fixed in 1.2.4)","noFixRecorded":false,"fixedIn":"1.2.4"}],"versionsText":"≤ 1.2.3 (fixed in 1.2.4)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"wp-mail-logging","name":"WP Mail Logging","label":"wp-mail-logging","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.10.5 (fixed in 1.11.0)","noFixRecorded":false,"fixedIn":"1.11.0"}],"versionsText":"≤ 1.10.5 (fixed in 1.11.0)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"wp-maximum-upload-file-size","name":"EasyMedia – Increase Media Upload File Size | Role-Based Upload Limit | Increase Execution Time","label":"wp-maximum-upload-file-size","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.0.9 (fixed in 1.1.0)","noFixRecorded":false,"fixedIn":"1.1.0"}],"versionsText":"≤ 1.0.9 (fixed in 1.1.0)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"wp-user-frontend","name":"User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission","label":"wp-user-frontend","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.6.0 (fixed in 3.6.1)","noFixRecorded":false,"fixedIn":"3.6.1"}],"versionsText":"≤ 3.6.0 (fixed in 3.6.1)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"wpfunnels","name":"WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell","label":"wpfunnels","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.6.4 (fixed in 2.6.5)","noFixRecorded":false,"fixedIn":"2.6.5"}],"versionsText":"2.6.4 (fixed in 2.6.5)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"wpvr","name":"WPVR – 360 Panorama viewer and Virtual Tour Builder for WordPress","label":"wpvr","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 8.2.5 (fixed in 8.2.6)","noFixRecorded":false,"fixedIn":"8.2.6"}],"versionsText":"≤ 8.2.5 (fixed in 8.2.6)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"zero-bs-accounting","name":"Zero BS Accounting","label":"zero-bs-accounting","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.0.6 (fixed in 2.0.0)","noFixRecorded":false,"fixedIn":"2.0.0"}],"versionsText":"≤ 1.0.6 (fixed in 2.0.0)","eol":null,"hubHref":null}],"affectedCount":55,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://patchstack.com/database/wordpress/plugin/woocommerce-conversion-tracking/vulnerability/wordpress-woocommerce-conversion-tracking-plugin-2-0-10-csrf-broken-access-control?_s_id=cve","label":"patchstack.com/database/…","hostname":"patchstack.com","tags":["VDB Entry"]},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e869800a-6fbc-4a1a-97fd-92ecbf3305ff","label":"www.wordfence.com/threat-intel/vulnerabilities/id/e869800a-6fbc-4a1a-97fd-92ecbf3305ff","hostname":"www.wordfence.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-06-11T10:43:01.912Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-11T12:25:01.706Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":17,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T18:21:40.203Z","stale":false,"partial":false}}