Lucene search

K
wpvulndbWpvulndbWPVDB-ID:F9B8AED3-72EC-4AEC-92FB-B3673E0EE805
HistoryJan 12, 2024 - 12:00 a.m.

Booster Plus for WooCommerce < 7.1.2 - Missing Authorization to Arbitrary Page/Post Deletion

2024-01-1200:00:00
wpscan.com
12
wordpress
vulnerability
data loss
capability check
authenticated attackers
subscriber level

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

16.6%

Description The Booster Plus for WooCommerce plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on an unknown function in all versions up to 7.1.2 (exclusive). This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary pages and posts.

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

16.6%

Related for WPVDB-ID:F9B8AED3-72EC-4AEC-92FB-B3673E0EE805