Lucene search

K
wpvulndbWpvulndbWPVDB-ID:14901868-7551-490A-B975-E44675AD2A19
HistoryJan 04, 2024 - 12:00 a.m.

Booster Elite for WooCommerce < 7.1.3 - Subscriber+ Content Injection

2024-01-0400:00:00
wpscan.com
6
booster elite
woocommerce
wordpress
content injection
vulnerability
capability checks

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Description The Booster Elite for WooCommerce plugin for WordPress is vulnerable to content injection via an unknown parameter in all versions up to and including 7.1.2 due to insufficient capability checks. This makes it possible for authenticated attackers, with subscriber access and above, to create and edit content using the plugin.

CPENameOperatorVersion
eq7.1.3

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for WPVDB-ID:14901868-7551-490A-B975-E44675AD2A19