CVE-2023-33316

16th percentile - higher than 16% of all known CVEs

The WooCommerce Follow-Up Emails (AutomateWoo) plugin versions <= 4.9.40 has a Cross-Site Request Forgery (CSRF) vulnerability. An attacker can exploit this flaw to perform unauthorized actions on behalf of a logged-in user.

Organizations using this plugin may be exposed to unauthorized operations, potentially leading to data loss or compromise of user account security.

It is recommended to update the plugin to the latest version to mitigate this vulnerability and implement additional security measures such as CSRF token verification.