CVE Feed

Dashboard / CVE / CVE-2023-51678

CVE-2023-51678

Cross-Site Request Forgery (CSRF) vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 2.0.33.

Published:Jan 5, 2024

Last Modified:Apr 28, 2026

EPS:Jan 5, 2024

EPSS Score:0.00067

CVSS Score:4.3

Affected Products

Vendor

Product

Action

Vendor

Doofinder

Product

Doofinder

Doofinder

Doofinder

Exploits

No exploit reference

Common Weakness Enumeration

CWE-352 Cross-Site Request Forgery (CSRF)

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-111 JSON Hijacking (aka JavaScript Hijacking)

CAPEC-462 Cross-Domain Search Timing

CAPEC-467 Cross Site Identification

CAPEC-62 Cross Site Request Forgery

Related CVEs

CVE-2024-51697 (CVSS 7.1) — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofinde…

CVE-2024-25596 (CVSS 5.9) — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofinde…

CVE-2023-40602 (CVSS 4.7) — URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Doofinder Doofinder WP & WooCommerce Sear…

CVE-2023-49185 (CVSS 7.1) — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Doofinde…

References

https://patchstack.com/database/vulnerability/doofinder-for-woocommerce/wordpress-doofinder-wp-woocommerce-search-plugin-2-0-33-broken-access-control-vulnerability?_s_id=cve

https://patchstack.com/database/vulnerability/doofinder-for-woocommerce/wordpress-doofinder-wp-woocommerce-search-plugin-2-0-33-broken-access-control-vulnerability?_s_id=cve

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High