CVE-2023-34015

HIGH 8.8CVE-2023-34015 · Published 11/07/2023 · updated 17/06/2026

In short

CVE-2023-34015 is a HIGH (CVSS 8.8) vulnerability affecting advanced-free-flat-shipping-woocommerce (piwebsolution).
Chance of exploitation in the next 30 days (EPSS): 0.25%, higher than 16.2% of all vulnerabilities.
Fix: update to 1.6.4.6 or later.

Package	Affected versions	Patched versions
advanced-free-flat-shipping-woocommerce piwebsolution	`< 1.6.4.6`	`1.6.4.6`

Description

Cross-Site Request Forgery (CSRF) vulnerability in PI Websolution Conditional shipping & Advanced Flat rate shipping rates / Flexible shipping for WooCommerce shipping plugin <= 1.6.4.4 versions.

References

patchstack.com/database/vulnerability/advanced-free-flat-shipping-woocommerce/wordpress-advanced-flat-rate-shipping-woocommerce-plugin-1-6-4-4-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free