CVE-2023-52231 — Sensitive Information Exposure in Plus FOR Woocommerce

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.8%
top 26.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Booster Plus FOR WoocommerceBooster FOR Woocommerce
Timeline
PublishedMar 28

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.2.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5booster/booster_plus_for_woocommercen/a — 7.1.2
▶NVDbooster/booster< 7.1.2

🔴Vulnerability Details

2
CVEList
WordPress Booster Plus for WooCommerce plugin < 7.1.2 - Auth. Sensitive Data Exposure vulnerability↗2024-03-28
▶
GHSA
GHSA-3cvx-3rj3-cchm: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Plus for WooCommerce↗2024-03-28
▶
CVE-2023-52231 — Sensitive Information Exposure | cvebase