CVE-2023-48768

HIGH 8.8CVE-2023-48768 · Published 18/12/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
quantity plus minus button for woocommerce codeastrology	`< 1.2.0`	`1.2.0`

Description

Cross-Site Request Forgery (CSRF) vulnerability in CodeAstrology Team Quantity Plus Minus Button for WooCommerce by CodeAstrology.This issue affects Quantity Plus Minus Button for WooCommerce by CodeAstrology: from n/a through 1.1.9.

References

patchstack.com/database/vulnerability/wc-quantity-plus-minus-button/wordpress-quantity-plus-minus-button-for-woocommerce-by-codeastrology-plugin-1-1-9-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free