← Database

CVE-2022-4363

MEDIUM CVSS: 6.5 Published: 2025-05-16 Modified: 2026-06-17

Description

The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1 have a flawed CSRF check when updating their settings, which could allow attackers to make a logged in admin update them via a CSRF attack

Affected Platforms

Cedcommerce Wholesale MarketCedcommerce Wholesale Market For Woocommerce

Weakness Type

CWE-352

References