Lucene search

K
wpvulndbWpvulndbWPVDB-ID:917C3814-258F-451E-BCA4-4F78CB7D6A75
HistoryNov 29, 2023 - 12:00 a.m.

Booster for WooCommerce < 7.1.3 - Missing Authorization to Product Creation/Modification

2023-11-2900:00:00
wpscan.com
6
woocommerce
vulnerability
authorization
product modification
wordpress

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

9.0%

Description The Booster for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wcj_product_add_new() function in all versions up to, and including, 7.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to create and modify products

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

9.0%

Related for WPVDB-ID:917C3814-258F-451E-BCA4-4F78CB7D6A75