blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2023-3547

HIGH 8.8 CVSS 3.1
Published
September 25, 2023
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several actions, allowing an attacker to perform CSRF attacks.

Affected products and versions

  • Unknown All in One B2B for WooCommerce — Up to and including 1.0.3
  • all_in_one_b2b_for_woocommerce_project all_in_one_b2b_for_woocommerce — Up to and including 1.0.3

References

  • wpscan.com https://wpscan.com/vulnerability/3cfb6696-18ad-4a38-9ca3-992f0b768b78 Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record