Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2022-41685: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Viszt Péter's Integration for Szamlazz.hu & WooC

29
Routine
MEDIUM 5.4UPGRADEUPGRADE

CVE-2022-41685 is a medium-severity flaw (CVSS 5.4) affecting integration for szamlazz.hu \& woocommerce, package points and shipping labels for woocommerce. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Viszt Péter's Integration for Szamlazz.hu & WooCommerce plugin <= 5.6.3.2 and Csomagpontok és szállítási címkék WooCommerce-hez plugin <= 1.9.0.2 on WordPress.

Why this priority

  • No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score5.4 (Medium)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededNone
User interactionRequired
EPSS exploit chance0.5% (top 61%)
CISA exploited listNo
WeaknessCWE-352
Published2022-11-18
Last modified2026-06-17
Publisher (CNA): Patchstack · Vendor: visztpeter

Share: LinkedIn · X · Reddit

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

visztpeter integration for szamlazz.hu \& woocommerce UPGRADE
Affected: < 5.6.3.3
Fixed in: 5.6.3.3
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy integration-for-szamlazz.hu--woocommerce || rpm -q integration-for-szamlazz.hu--woocommerce || integration-for-szamlazz.hu--woocommerce --version
2. UPGRADE to 5.6.3.3 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade integration-for-szamlazz.hu--woocommerce
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade integration-for-szamlazz.hu--woocommerce
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
visztpeter package points and shipping labels for woocommerce UPGRADE
Affected: < 1.9.0.3
Fixed in: 1.9.0.3
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy package-points-and-shipping-labels-for-woocommerce || rpm -q package-points-and-shipping-labels-for-woocommerce || package-points-and-shipping-labels-for-woocommerce --version
2. UPGRADE to 1.9.0.3 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade package-points-and-shipping-labels-for-woocommerce
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade package-points-and-shipping-labels-for-woocommerce
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2022-41685?

integration for szamlazz.hu \& woocommerce: upgrade to 5.6.3.3; package points and shipping labels for woocommerce: upgrade to 1.9.0.3. Exact commands for each OS are on this page.

Is CVE-2022-41685 being exploited?

CVE-2022-41685 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2022-41685 affect?

CVE-2022-41685 affects integration for szamlazz.hu \& woocommerce, package points and shipping labels for woocommerce. Severity is medium (CVSS 5.4). Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Viszt Péter's Integration for Szamlazz.hu & WooCommerce plugin <= 5.6.3.2 and Csomagpontok és szállítási címkék WooCommerce-hez plugin <= 1.9.0.2 on WordPress.

How urgent is CVE-2022-41685?

Priority 29/100. No elevated risk signals yet.

Software pages

WordPress vulnerabilities · WooCommerce vulnerabilities

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.