CVE-2022-3763

CVE-2022-3763: Booster for WooCommerce - Checkout Files Deletion via CSRF

Vendor Unknown
Product Booster for WooCommerce
Published November 21, 2022
Last update April 30, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not have CSRF check in place when deleting files uploaded at the checkout, allowing attackers to make a logged in shop manager or admin delete them via a CSRF attack

Key dates

02Disclosure timeline

November 21, 2022 CVE published
April 30, 2025 Record updated