Lucene search

K
wpvulndbWpvulndbWPVDB-ID:C4C3570B-375A-4CD7-9F4E-BB27CC62986F
HistoryJan 12, 2024 - 12:00 a.m.

Booster Plus for WooCommerce < 7.1.2 - Missing Authorization to Order Information Disclosure

2024-01-1200:00:00
wpscan.com
10
woocommerce
wordpress
vulnerability
data access

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Description The Booster Plus for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on an unknown function in all versions up to 7.1.2 (exclusive). This makes it possible for authenticated attackers, with susbcriber-level access and above, to access arbitrary order information.

CPENameOperatorVersion
eq7.1.2

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for WPVDB-ID:C4C3570B-375A-4CD7-9F4E-BB27CC62986F