Komfortkasse for WooCommerce vulnerabilities
We track 1 vulnerability in Komfortkasse for WooCommerce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Komfortkasse for WooCommerce vulnerabilities
- 8.8 High severity
Komfortkasse for WooCommerce: Cross-Site Request Forgery
The Komfortkasse for WooCommerce WordPress plugin before 1.4.9 does not properly validate the authenticity of REST API requests, overriding WordPress's own nonce verification so that a request forged in a logged-in administrator's browser is accepted, which ca