ImpleCode Product Catalog Simple Cross-Site Request Forgery Vulnerability

Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability exists in the ImpleCode Product Catalog Simple plugin, specifically in versions through 1.8.4. This vulnerability allows attackers to trick users into performing actions they did not intend to, potentially leading to unauthorized changes or actions within the application.

Impact

Exploitation of this vulnerability could allow attackers to perform actions on behalf of users, potentially leading to unauthorized changes or modifications within the WordPress site.

Added: Oct 22, 2025, 3:33 PM
Updated: Oct 22, 2025, 9:44 PM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
0.6
exploitability
6.5
remediation
0.0
relevance
0.8
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.