CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
What the vulnerability does
Improper Authentication vulnerability in Pluggabl LLC Booster for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booster for WooCommerce: from n/a through 7.1.2.
Explanation of Vulnerability in Simple Terms
Booster for WooCommerce versions up to 7.1.2 contain an authentication bypass vulnerability. An attacker with low-level user privileges can modify data they should not have access to, such as product information or order details. The vulnerability does not require user interaction and is exploitable over the network. Site owners should update to a version newer than 7.1.2.
What an attacker can do
Modify WooCommerce data (products, orders, settings) beyond their assigned permission level.
Potential impact on your site
Unauthorized changes to product listings, pricing, orders, or store configuration by low-privilege users.
Conditions required to exploit
Attacker must have a low-privilege user account (e.g., customer or subscriber role).
Key dates
External resources
Related vulnerabilities
