Pluggabl Llc Booster For Woocommcerce vulnerabilities

1 known vulnerability affecting pluggabl_llc/booster_for_woocommcerce.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2021-34646CRITICALCVSS 9.8PoC≥ 5.4.3, ≤ 5.4.32021-08-30

CVE-2021-34646 [CRITICAL] CWE-290 CVE-2021-34646: Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the process_email_verification function due to a random token generation weakness in the reset_and_mail_activation_link function found in the ~/includes/class-wcj-emails-verification.php file. This allows attackers to i