YourPlugins Conditional Cart Messages for WooCommerce Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability exists in the YourPlugins Conditional Cart Messages for WooCommerce plugin, affecting versions through 1.2.10. This vulnerability allows stored Cross-Site Scripting (XSS) attacks, as it could enable an attacker to manipulate users with higher privileges into performing actions they did not intend to.

Impact

Exploitation could lead to stored Cross-Site Scripting, allowing for the injection of malicious scripts that are executed in the context of the user.

Remediation

Users are advised to remove and replace this plugin, as it is likely abandoned and has not been updated in over a year.