Cyber Resilience

CVE-2023-3547

HighPublic PoC

Published: 25 September 2023

Published
25 September 2023
Modified
23 April 2025
KEV Added
—
Patch
—
CVSS Score v3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.0020 42.3th percentile
Risk Priority 18 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2023-3547 is a high-severity an unspecified weakness vulnerability in All In One B2B For Woocommerce Project All In One B2B For Woocommerce. Its CVSS base score is 8.8 (High).

Operationally, ranked at the 42.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability details

The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several actions, allowing an attacker to perform CSRF attacks.

CWE(s)
None listed

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

all in one b2b for woocommerce project
all in one b2b for woocommerce
≤ 1.0.3

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References