CVE-2024-1986 - Elite Booster for WooCommerce <= 7.1.7 - Authenticated (Subscriber+) Arbitrary File Upload

Back Back to CVE browser

HIGH

Elite Booster for WooCommerce <= 7.1.7 - Authenticated (Subscriber+) Arbitrary File Upload

Published Mar 7, 2024

8.8

HIGH

CVSS 3.1

EPSS 1.28%

Description

The Booster Elite for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wc_add_new_product() function in all versions up to, and including, 7.1.7. This makes it possible for customer-level attackers, and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. This is only exploitable when the user product upload functionality is enabled.

Affected products

Vendor Pluggabl Product Booster Elite for WooCommerce Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=7.1.7

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Pluggabl

Booster Elite for WooCommerce

unaffected

Version	Status	Constraints
0	affected	<=7.1.7

Vendor Pluggabl Product Booster Elite for Woocommerce Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=7.1.7

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Pluggabl

Booster Elite for Woocommerce

n/a

Version	Status	Constraints
0	affected	<=7.1.7

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (8)

Link	Providers	Tags
https://booster.io/		Product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-17702		Advisory
https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-add-form-shortcodes.php#L132		Product
https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-add-form-shortcodes.php#L138		Product
https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-add-form-shortcodes.php#L322		Product
https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-add-form-shortcodes.php#L333		Product
https://wordpress.org/plugins/woocommerce-jetpack/		Product
https://www.wordfence.com/threat-intel/vulnerabilities/id/c9c2fb7f-a05b-4852-97eb-7befe880d703?source=cve		Third Party Advisory