CVE-2022-4017

The CVE-2022-4017 entries cover multiple Booster for WooCommerce plugins (Booster, Booster Plus, Booster Elite) for WordPress, with versions prior to 6.0.1 vulnerable due to flawed or missing CSRF checks in numerous places. This CSRF weakness could permit logged-in users to perform unintended act...

CVE-2022-4017 Booster for WooCommerce - Multiple CSRF

The Booster for WooCommerce WordPress plugin before 6.0.1, Booster Plus for WooCommerce WordPress plugin before 6.0.1, Booster Elite for WooCommerce WordPress plugin before 6.0.1 have either flawed CSRF checks or are missing them completely in numerous places, allowing attackers to make logged in...

WordPress Booster Elite for WooCommerce Plugin < 6.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Booster Elite for WooCommerce Type Plugin Vulnerable versions 6.0.1 Fixed in 6.0.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-4017 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e0191ec2ee9f Credits WPscan...

WordPress Booster Plus for WooCommerce Plugin < 6.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Booster Plus for WooCommerce Type Plugin Vulnerable versions 6.0.1 Fixed in 6.0.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-4017 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 08ae6d97dc35 Credits WPscan...

WordPress Booster for WooCommerce Plugin < 6.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Booster for WooCommerce Type Plugin Vulnerable versions 6.0.1 Fixed in 6.0.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-4017 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID de8fb5129362 Credits WPScan Require...