Product
A Cross-Site Request Forgery (CSRF) vulnerability in Blacklist Manager for WooCommerce (<= 2.3.1) allows unauthenticated attackers to bypass REST API nonce checks and execute unauthorized actions, including the creation of new administrator accounts, by tricking a logged-in administrator into visiting a malicious page.