WordPress URL Shortener WooCommerce Plugin Cross-Site Request Forgery Vulnerability

A vulnerability in the URL Shortener WordPress plugin, specifically in versions through 9.0.2, allows for Cross-Site Request Forgery (CSRF) attacks. The plugin lacks CSRF protection in certain bulk action features, which could enable attackers to manipulate logged-in administrators into performing undesired actions, such as deleting customer accounts.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of logged-in administrators, potentially allowing for the deletion of customer accounts.