CVE-2022-46797: Conversios

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in Conversios All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce plugin <= 5.2.3 leads to plugin settings change.

Affected products

• Conversios Conversios: before 5.2.4 (fixed in 5.2.4)

Published 2023-03-01. Last modified 2026-06-17.