CVE-2016-4904
HighSummary
The CSRF vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to hijack user authentication and perform unintended operations.
Risk Assessment
Attackers can exploit this vulnerability to take control of a user's account, potentially leading to unauthorized actions within the system.
Recommendation
It is recommended to update WP-OliveCart to version 3.1.3 or later and WP-OliveCartPro to version 3.1.8 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in WP-OliveCart, WP-OliveCartPro
Original NVD description (English source)
Cross-site request forgery (CSRF) vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to hijack the authentication of a user to perform unintended operations via unspecified vectors.