July 31, 2023, 10:15 a.m. |

National Vulnerability Database web.nvd.nist.gov

The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when canceling pre-orders, which could allow attackers to make logged in admins cancel arbitrary pre-orders via a CSRF attack

attack attackers check csrf csrf attack cve plugin woocommerce wordpress wordpress plugin

Information System Security Officer / Auditor

@ Peraton | Washington, DC, United States

Senior Cloud Security Engineer

@ Alludo | US | Boston, MA, US | San Francisco, CA, US | Austin, TX, US

Tier 3 - Malware Analyst, SME

@ Resource Management Concepts, Inc. | Quantico, Virginia, United States

Temp to Hire Senior DevSecOps Engineer

@ Scientific Systems Company, Inc. | Burlington, Massachusetts, United States

Security Engineer III - Splunk | SIEM

@ JPMorgan Chase & Co. | Plano, TX, United States

Information Systems Security Officer / Auditor

@ Peraton | Washington, DC, United States