Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

2 records

Release: Booster Elite for WooCommerce, Booster Plus for WooCommerce, Booster for WooCommerce 1.1.7, 5.6.5, 5.6.7 Clear all filters
TI-2022-03454 CVE-2022-3763 · GHSA-q4cg-p4wr-gxc3

Booster for WooCommerce - Checkout Files Deletion via CSRF

Priority HIGH 68

The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not have CSRF check in place when dele…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00401 Published 2022-11-21 Fixed in 5.6.7, 5.6.5 +1
TI-2022-03453 CVE-2022-3762 · GHSA-65wp-vh9q-f2vh

Booster for WooCommerce - ShopManager+ Arbitrary File Download

Priority MEDIUM 62

The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not validate files to download in some…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01022 Published 2022-11-21 Fixed in 5.6.7, 5.6.5 +1