Lucene search

K
wpvulndbWpvulndbWPVDB-ID:59DD870F-72A8-443F-8978-E946CE413230
HistoryNov 29, 2023 - 12:00 a.m.

Booster for WooCommerce < 7.1.2 - Authenticated (Subscriber+) Information Disclosure via Shortcode

2023-11-2900:00:00
wpscan.com
30
woocommerce
wordpress
vulnerability
information disclosure
shortcode
authenticated
subscriber+
attackers
sensitive site options

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

18.1%

Description The Booster for WooCommerce for WordPress is vulnerable to Information Disclosure via the ‘wcj_get_option’ shortcode in versions up to, and including, 7.1.1 due to insufficient controls on the information retrievable via the shortcode. This makes it possible for authenticated attackers, with subscriber-level capabilities or above, to retrieve arbitrary sensitive site options.

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

18.1%

Related for WPVDB-ID:59DD870F-72A8-443F-8978-E946CE413230