CVE-2023-48747 — Improper Authentication in FOR Woocommerce

CWE-287 — Improper Authentication3 documents3 sources

Severity

8.8HIGHNVD

CNA6.5

EPSS

0.7%

top 27.90%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Booster FOR Woocommerce Pluggabl LLC Booster FOR Woocommerce

Timeline

PublishedJun 4

Description

Improper Authentication vulnerability in Pluggabl LLC Booster for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booster for WooCommerce: from n/a through 7.1.2.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5pluggabl_llc/booster_for_woocommercen/a — 7.1.2

▶NVDbooster/booster< 7.1.3

🔴Vulnerability Details

CVEList

WordPress Booster for WooCommerce plugin <= 7.1.2 - Authenticated Production Creation/Modification Vulnerability↗2024-06-04

▶

GHSA

GHSA-rjrv-98g6-3695: Improper Authentication vulnerability in Pluggabl LLC Booster for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs↗2024-06-04

▶