CVE-2022-46805: Wptrio Conditional Shipping For Woocommerce

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin <= 2.3.1 leading to activation/deactivation of plugin rulesets.

Affected products

• Wptrio Conditional Shipping For Woocommerce: before 2.3.2 (fixed in 2.3.2)

Published 2023-03-01. Last modified 2026-06-17.