CVE-2022-47150: falsificación de peticiones (CSRF) en Product Carousel Slider & Grid Ultimate for WooCommerce y otras 53 tecnologías

[B] Qué hacer

¿Cómo lo soluciono?

1. 01

   Actualiza Bangladeshi Payment Gateways – Make Payment Using QR Code a la 2.0.7 y Boostify Header Footer Builder for Elementor a la 1.2.9 y BuddyPress Builder for Elementor – BuddyBuilder a la 1.7.2 y Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD a la 3.1.4 y Click to top a la 1.2.20 y Conversion Tracking for WooCommerce a la 2.0.11 y Dark Mode – Improve Accessibility with AI Powered Dark Theme a la 3.0.5 y Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode & Accessibility Plugin a la 2.1.2 y Dashboard Welcome for Elementor a la 1.0.7 y Directorist: AI-Powered Business Directory, Listings & Classified Ads a la 7.7.2 y Easy Video Reviews – Testimonial Grid & Social Proof a la 1.5.0 y EasyMedia – Increase Media Upload File Size | Role-Based Upload Limit | Increase Execution Time a la 1.1.0 y Exclusive Addons for Elementor a la 2.6.2 y FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet a la 2.0.0 y FlexTable – Data Table Sync with Google Sheets a la 2.12.15 y Fuse Social Icons a la 5.4.7 y Gallery Box a la 1.7.31 y GS Pinterest Portfolio – Pinterest Feed, Pinterest Board & Pin Widgets a la 1.6.3 y HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates a la 3.8.3 y Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator a la 1.4.2 y Magical Posts Display – Elementor Advanced Posts widgets a la 1.2.16 y Markdown Editor (Formerly Dark Mode) a la 4.1.3 y PDF Invoices & Packing Slips for WooCommerce – Challan Invoice Plugin a la 3.4.9 y Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget a la 1.6.4 y Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages a la 1.0.2 y Product Carousel Slider & Grid Ultimate for WooCommerce a la 1.9.4 y Product Category Showcase for WooCommerce a la 2.0.0 y Product Category Slider for WooCommerce a la 4.1.6 y Product Gallery Slider, Additional Variation Images for WooCommerce a la 2.2.7 y Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker a la 2.6.13 y Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider a la 3.28.1 y Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews a la 1.9.8 y Stax Addons for Elementor a la 1.4.4 y Stylish Cost Calculator – Quote Generator, Lead Gen & Price Estimator a la 7.3.7 y Subscribe2 – Form, Email Subscribers & Newsletters a la 10.38 y Texty – SMS Notification for WordPress, WooCommerce, Dokan and more a la 1.1.2 y User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission a la 3.6.1 y Visibility Logic for Elementor a la 2.3.4 y W4 Post List a la 2.4.3 y weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot a la 1.7.6 y weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce a la 1.14.2 y wePOS – Point Of Sale (POS) for WooCommerce & Dokan a la 1.2.6 y Wiremo – Product Reviews for WooCommerce a la 1.4.97 y Woostify Sites Library a la 1.4.4 y Worth The Read a la 1.14.1 y WP CTA – Call Now Button, Sticky Button & Call to Action Builder a la 1.5.9 y WP Mail Logging a la 1.11.0 y WPEPP – All In One WordPress Security, Firewall, Malware Scanner & Login Protection a la 1.2.4 y WPVR – 360 Panorama viewer and Virtual Tour Builder for WordPress a la 8.2.6 y Zero BS Accounting a la 2.0.0 o posterior.

   Es la corrección más reciente que dan las fuentes. Si no puedes cambiar de rama, cada una tiene la suya en la lista de arriba.

2. 02

   Que no te pille la próxima.

   Añade Bangladeshi Payment Gateways – Make Payment Using QR Code y Boostify Header Footer Builder for Elementor y BuddyPress Builder for Elementor – BuddyBuilder y Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD y Click to top y Conversion Tracking for WooCommerce y Dark Mode – Improve Accessibility with AI Powered Dark Theme y Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode & Accessibility Plugin y Dashboard Welcome for Elementor y Directorist: AI-Powered Business Directory, Listings & Classified Ads y Easy Video Reviews – Testimonial Grid & Social Proof y EasyMedia – Increase Media Upload File Size | Role-Based Upload Limit | Increase Execution Time y Exclusive Addons for Elementor y Exclusive Team for Elementor y FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet y FlexTable – Data Table Sync with Google Sheets y Fuse Social Icons y Gallery Box y GS Pinterest Portfolio – Pinterest Feed, Pinterest Board & Pin Widgets y HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates y Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator y Magical Posts Display – Elementor Advanced Posts widgets y Markdown Editor (Formerly Dark Mode) y PDF Invoices & Packing Slips for WooCommerce – Challan Invoice Plugin y Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget y Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages y Product Carousel Slider & Grid Ultimate for WooCommerce y Product Category Showcase for WooCommerce y Product Category Slider for WooCommerce y Product Gallery Slider, Additional Variation Images for WooCommerce y Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker y PT Addons for Elementor Lite y Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider y Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews y Stax Addons for Elementor y Stylish Cost Calculator – Quote Generator, Lead Gen & Price Estimator y Subscribe2 – Form, Email Subscribers & Newsletters y Texty – SMS Notification for WordPress, WooCommerce, Dokan and more y Update Image Tag Alt Attribute y User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission y Visibility Logic for Elementor y W4 Post List y weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot y weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce y wePOS – Point Of Sale (POS) for WooCommerce & Dokan y Wiremo – Product Reviews for WooCommerce y Woostify Sites Library y Worth The Read y WP CTA – Call Now Button, Sticky Button & Call to Action Builder y WP Mail Logging y WPEPP – All In One WordPress Security, Firewall, Malware Scanner & Login Protection y WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell y WPVR – 360 Panorama viewer and Virtual Tour Builder for WordPress y Zero BS Accounting a Mi stack y tendrás a mano lo que salga de lo que usas.

[C] Cronología

Qué ha pasado

1. 14 dic. 2022 T0

   Se publica la vulnerabilidad

   según Wordfence Intelligence (Defiant)

2. 13 nov. 2024 T+700d

   Hay una versión corregida

   según Wordfence Intelligence (Defiant)

[D] Trazabilidad

Fuentes

• Wordfence Intelligence (Defiant) e869800a-6fbc-4a1a-97fd-92ecbf3305ff · consultada el 14 nov. 2026