VULNERABILITY INTELLIGENCE

CVE-2024-11842

CVSS score4.3 MEDIUM

EPSS probability0.22%

CISA KEVNot currently listed

Published2024-12-27

Last modified2026-06-17

Description

The DN Shipping by Weight for WooCommerce WordPress plugin before 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack