CVE-2025-64379 — Missing Authorization in FOR Woocommerce

CWE-862 — Missing Authorization3 documents3 sources

Severity

4.3MEDIUMNVD

EPSS

0.0%

top 91.96%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Booster FOR Woocommerce Pluggabl Booster FOR Woocommerce

Timeline

PublishedNov 13

Description

Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booster for WooCommerce: from n/a through <= 7.4.0.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5pluggabl/booster_for_woocommerce7.4.0

▶NVDbooster/booster< 7.5.0

🔴Vulnerability Details

GHSA

GHSA-6fqv-h56w-r958: Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Configured Access Control Se↗2025-11-13

▶

CVEList

WordPress Booster for WooCommerce plugin <= 7.4.0 - Broken Access Control vulnerability↗2025-11-13

▶