title: All in One B2B for WooCommerce <= 1.0.3 - Multiple CSRF
description: The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several actions, allowing an attacker to perform CSRF attacks.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
vendor: Unknown
product: All in One B2B for WooCommerce
versions:
status: affected, versionType: custom, version: 0, lessThanOrEqual: 1.0.3
defaultStatus: affected
}