Vulnerability Details: Cross-Site Request Forgery (CSRF) in WooCommerce
One of the changelog entries for the latest version of the plugin WooCommerce is “Security – Added nonce check to CSV importer actions.”. Considering the plugin has 4+ million installs that sounded like something that would have been noticed before if it was true. When we went look into this we first found that the first step of the import process checked for a valid nonce. Then we found that the AJAX portion of the importing also checks for a valid nonce. Finally what we found was that that all the other steps in the process didn’t check for a valid nonce and will handle providing the nonce for the AJAX portion of the import.
...
This post provides insights on a vulnerability in the WordPress plugin WooCommerce not discovered by us, where the discoverer hadn't provided the details needed for us to confirm the vulnerability while we were adding it to the data set for our service, so the rest of its contents are limited to subscribers of our service.
If you were using our service, you would have already been warned about this vulnerability if your website is vulnerable due to it. You can try out our service for free and then see the rest of the details of the vulnerability.
For existing customers, please log in to your account to view the rest of the contents of the post.