6.8
CVSSv2

CVE-2012-5178

Published: 19/12/2012 Updated: 29/01/2013
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site request forgery (CSRF) vulnerability in the Welcart plugin prior to 1.2.2 for WordPress allows remote malicious users to hijack the authentication of arbitrary users for requests that complete a purchase.

Vulnerable Product Search on Vulmon Subscribe to Product

welcart welcart_plugin

welcart welcart_plugin 0.9.1

welcart welcart_plugin 0.5