What the vulnerability does
01Description
Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the process_email_verification function due to a random token generation weakness in the reset_and_mail_activation_link function found in the ~/includes/class-wcj-emails-verification.php file. This allows attackers to impersonate users and trigger an email address verification for arbitrary accounts, including administrative accounts, and automatically be logged in as that user, including any site administrators. This requires the Email Verification module to be active in the plugin and the Login User After Successful Verification setting to be enabled, which it is by default.
Explanation of Vulnerability in Simple Terms
02Summary
Booster for WooCommerce version 5.4.3 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain full control of the site. The vulnerability stems from improper authentication checks (CWE-290) in a critical function. No user interaction is required; the attack can be executed remotely over the network. Site administrators should update immediately to a patched version.
What an attacker can do
03Attacker Capabilities
Execute arbitrary code, read/modify all site data, and take full control of the WooCommerce store without logging in.
Potential impact on your site
04Site Impact
Complete compromise of the WooCommerce site, including customer data, payment information, and store configuration.
Conditions required to exploit
05Prerequisites
Network access only; no authentication or user interaction required.
Key dates
06Disclosure timeline
August 30, 2021
CVE published
May 5, 2025
Record updated
