CVE-2022-41685

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Viszt Péter's Integration for Szamlazz.hu & WooCommerce plugin <= 5.6.3.2 and Csomagpontok és szállítási címkék WooCommerce-hez plugin <= 1.9.0.2 on WordPress.

• CWE-352
• CWE-352

• https://patchstack.com/database/vulnerability/hungarian-pickup-points-for-woocommerce/wordpress-csomagpontok-es-szallitasi-cimkek-woocommerce-hez-plugin-1-9-0-2-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cveThird Party Advisory
• https://patchstack.com/database/vulnerability/integration-for-szamlazzhu-woocommerce/wordpress-integration-for-szamlazz-hu-woocommerce-plugin-5-6-3-2-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cveThird Party Advisory
• https://wordpress.org/plugins/hungarian-pickup-points-for-woocommerce/#developersRelease Notes, Third Party Advisory
• https://wordpress.org/plugins/integration-for-szamlazzhu-woocommerce/#developersRelease Notes, Third Party Advisory
• https://patchstack.com/database/vulnerability/hungarian-pickup-points-for-woocommerce/wordpress-csomagpontok-es-szallitasi-cimkek-woocommerce-hez-plugin-1-9-0-2-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cveThird Party Advisory
• https://patchstack.com/database/vulnerability/integration-for-szamlazzhu-woocommerce/wordpress-integration-for-szamlazz-hu-woocommerce-plugin-5-6-3-2-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cveThird Party Advisory
• https://wordpress.org/plugins/hungarian-pickup-points-for-woocommerce/#developersRelease Notes, Third Party Advisory
• https://wordpress.org/plugins/integration-for-szamlazzhu-woocommerce/#developersRelease Notes, Third Party Advisory

Published

Nov 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-41678Once an user is authenticated on Jolokia, he can potentially…8.8
• CVE-2022-41679Forma LMS version 3.1.0 and earlier are affected by an Cross…6.1
• CVE-2022-4168Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-41680Forma LMS on its 3.1.0 version and earlier is vulnerable to …6.5
• CVE-2022-41681There is a vulnerability on Forma LMS version 3.1.0 and earl…8.8
• CVE-2022-41684A heap out of bounds read vulnerability exists in the OpenIm…5.5
• CVE-2022-41686OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versi…4.4
• CVE-2022-41687Insecure inherited permissions in the HotKey Services for so…7.8
• CVE-2022-41688 Delta Electronics InfraSuite Device Master versions 00.00.0…7.5
• CVE-2022-41689Improper access control in some Intel In-Band Manageability …7.8
• CVE-2022-4169The Theme and plugin translation for Polylang is vulnerable …5.3
• CVE-2022-41690Improper access control in the Intel(R) Retail Edge Mobile i…7.8