Pluggabl Llc Booster For Woocommerce vulnerabilities

5 known vulnerabilities affecting pluggabl_llc/booster_for_woocommerce.

Total CVEs

5

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM4

Vulnerabilities

Page 1 of 1

CVE-2023-48747HIGHCVSS 8.8≥ n/a, ≤ 7.1.22024-06-04

CVE-2023-48747 [HIGH] CWE-287 CVE-2023-48747: Improper Authentication vulnerability in Pluggabl LLC Booster for WooCommerce allows Accessing Funct Improper Authentication vulnerability in Pluggabl LLC Booster for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booster for WooCommerce: from n/a through 7.1.2.

CVE-2024-29760MEDIUMCVSS 6.1≥ n/a, ≤ 7.1.72024-03-27

CVE-2024-29760 [MEDIUM] CWE-79 CVE-2024-29760: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl LLC Booster for WooCommerce allows Reflected XSS.This issue affects Booster for WooCommerce: from n/a through 7.1.7.

CVE-2023-48333MEDIUMCVSS 6.5≥ n/a, ≤ 7.1.12023-11-30

CVE-2023-48333 [MEDIUM] CWE-200 CVE-2023-48333: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pluggabl LLC Booster for Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pluggabl LLC Booster for WooCommerce.This issue affects Booster for WooCommerce: from n/a through 7.1.1.

CVE-2023-40002MEDIUMCVSS 6.5≥ n/a, ≤ 7.1.12023-11-23

CVE-2023-40002 [MEDIUM] CWE-200 CVE-2023-40002: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pluggabl LLC Booster for Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pluggabl LLC Booster for WooCommerce plugin <= 7.1.1 versions.

CVE-2022-41805MEDIUMCVSS 4.3≤ 5.6.62022-11-18

CVE-2022-41805 [MEDIUM] CWE-352 CVE-2022-41805: Cross-Site Request Forgery (CSRF) vulnerability in Booster for WooCommerce plugin <= 5.6.6 on WordPr Cross-Site Request Forgery (CSRF) vulnerability in Booster for WooCommerce plugin <= 5.6.6 on WordPress.