title: eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF
description: The eCommerce Product Catalog Plugin for WordPress plugin before 3.3.26 does not have CSRF checks in some of its admin pages, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks, such as delete all products
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
vendor: Unknown
product: eCommerce Product Catalog Plugin for WordPress
versions:
status: affected, versionType: semver, version: 0, lessThan: 3.3.26
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}