CVE-2023-48747 - WordPress Booster for WooCommerce plugin <= 7.1.2 - Authenticated Production Creation/Modification Vulnerability

Back Back to CVE browser

HIGH

WordPress Booster for WooCommerce plugin <= 7.1.2 - Authenticated Production Creation/Modification Vulnerability

Published Jun 4, 2024

8.8

HIGH

CVSS 3.1

EPSS 0.40%

Description

Improper Authentication vulnerability in Pluggabl LLC Booster for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booster for WooCommerce: from n/a through 7.1.2.

Affected products

Vendor Pluggabl LLC Product Booster for WooCommerce Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <=7.1.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Pluggabl LLC

Booster for WooCommerce

unaffected

Version	Status	Constraints
-	affected	<=7.1.2

Remediation

Vendor solution

Update to 7.1.3 or a higher version.

Weaknesses (1)

CWE-287

Improper Authentication

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-52780		Advisory
https://patchstack.com/database/vulnerability/woocommerce-jetpack/wordpress-booster-for-woocommerce-plugin-7-1-2-authenticated-production-creation-modification-vulnerability?_s_id=cve		vdb-entryThird Party Advisory