CVE-2023-49855

高危 8.8CVE-2023-49855 · Published 18/12/2023 · updated 17/06/2026

要点

CVE-2023-49855 是影响 menu bar cart icon for woocommerce (binarycarpenter) 的高危 (CVSS 8.8)漏洞。
未来 30 天内被利用的概率（EPSS）：0.32%，高于 25.2% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
menu bar cart icon for woocommerce binarycarpenter	`≤ 1.49.3`	No fix yet

Description

Cross-Site Request Forgery (CSRF) vulnerability in BinaryCarpenter Menu Bar Cart Icon For WooCommerce By Binary Carpenter.This issue affects Menu Bar Cart Icon For WooCommerce By Binary Carpenter: from n/a through 1.49.3.

References

patchstack.com/database/vulnerability/bc-menu-cart-woo/wordpress-bc-menu-bar-cart-icon-for-woocommerce-by-binary-carpenter-plugin-1-49-3-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free