Overview
- Description
- Cross-Site Request Forgery (CSRF) vulnerability in StandaloneTech TeraWallet – For WooCommerce plugin <= 1.3.24 leading to plugin settings change.
- Source
- audit@patchstack.com
- NVD status
- Modified
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 4.3
- Impact score
- 1.4
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
- Severity
- MEDIUM
Social media
- Hype score
- Not currently trending
Configurations
[ { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:a:standalonetech:terawallet:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "FCD9A8B4-6A12-45EB-A177-D870E2BD5D98", "versionEndExcluding": "1.4.0" } ], "operator": "OR" } ] } ]