CVE-2023-48333

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pluggabl LLC Booster for WooCommerce.This issue affects Booster for WooCommerce: from n/a through 7.1.1...

CVE-2023-48333

creationtimestamp| type| source ---|---|--- 2023-12-17 10:11:50+00:00| seen| https://t.me/ctinow/155556...

CVE-2023-48333

CVE-2023-48333 affects Booster for WooCommerce (WordPress plugin by Pluggabl LLC) up to version 7.1.1, where an unauthorized actor with subscriber-level access could exfiltrate order information due to a missing capability check (init_atts). CVSS v3.1 base score 6.5 (Medium) with Confidentiality ...

WordPress Booster for WooCommerce Plugin <= 7.1.1 is vulnerable to Sensitive Data Exposure

Software Booster for WooCommerce Type Plugin Vulnerable versions = 7.1.1 Fixed in 7.1.2 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-48333 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID b3744065c2d4 Credits Dave Jong...