booster booster elite for woocommerce vulnerabilities and exploits

(subscribe to this query)

The Booster for WooCommerce WordPress plugin prior to 5.6.3, Booster Plus for WooCommerce WordPress plugin prior to 6.0.0, Booster Elite for WooCommerce WordPress plugin prior to 6.0.0 do not escape some URLs and parameters before outputting them back in attributes, leading to Re...

Booster Booster For Woocommerce Booster Booster Elite For Woocommerce Booster Booster Plus For Woocommerce

The Booster for WooCommerce WordPress plugin prior to 6.0.1, Booster Plus for WooCommerce WordPress plugin prior to 6.0.1, Booster Elite for WooCommerce WordPress plugin prior to 6.0.1 have either flawed CSRF checks or are missing them completely in numerous places, allowing mali...

Booster Booster For Woocommerce Booster Booster Elite Woocommerce Booster Booster Plus Woocommerce

The Booster for WooCommerce WordPress plugin prior to 5.6.7, Booster Plus for WooCommerce WordPress plugin prior to 5.6.6, Booster Elite for WooCommerce WordPress plugin prior to 1.1.8 does not properly check for CSRF when creating and deleting Customer roles, allowing malicious ...

Booster Booster For Woocommerce

The Booster for WooCommerce WordPress plugin prior to 5.6.7, Booster Plus for WooCommerce WordPress plugin prior to 5.6.5, Booster Elite for WooCommerce WordPress plugin prior to 1.1.7 do not have CSRF check in place when deleting files uploaded at the checkout, allowing maliciou...

Booster Booster For Woocommerce

The Booster for WooCommerce WordPress plugin prior to 5.6.7, Booster Plus for WooCommerce WordPress plugin prior to 5.6.5, Booster Elite for WooCommerce WordPress plugin prior to 1.1.7 do not validate files to download in some of its modules, which could allow ShopManager and Adm...

Booster Booster For Woocommerce

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Elite for WooCommerce.This issue affects Booster Elite for WooCommerce: from n/a prior to 7.1.2.

The Booster Elite for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wc_add_new_product() function in all versions up to, and including, 7.1.7. This makes it possible for customer-level attackers, and above, to ...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook