Log out
Get PRO

Latest

Input validation vulnerability in Booster for WooCommerce 5.6.1

  • Severity: high-risk
  • Status: Fixed
  • Publication: July 27, 2022

The Booster for WooCommerce plugin for WordPress has a security vulnerability in versions up to and including 5.6.1. This vulnerability is due to missing or incorrect validation on multiple functions, which allows unauthenticated attackers to perform administrative actions like adding VAT rates, saving metaboxes, importing settings, and more, if they can trick a site administrator into clicking on a link.

Detected in:

Booster for WooCommerce fixed vulnerable versions: >= * <= 5.6.1
Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools fixed vulnerable versions:
Booster for WooCommerce – PDF Invoices, Bulk Price Editor, Currency Switcher & 100+ Tools fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.