Critical · published August 30, 2021
CVSS calls it critical at 9.8. It sits in the 98.9th percentile for exploit probability.
🚨 An attacker could impersonate any user—yes, even admins—thanks to a sneaky flaw in the WooCommerce Booster plugin! 🔥 Think of this vulnerability as a misdirected invitation to a VIP-only party. If the bouncer mistakenly lets in anyone with a simple name tag, they could waltz right into the event and enjoy all the privileges without a proper check. This is absolutely devastating! An attacker can bypass authentication and log in as any user, including site administrators, simply by triggering the email verification process. This means they could potentially wreak havoc on your WooCommerce store—think unauthorized changes, data breaches, or even deleting critical information.
Think of this vulnerability as a misdirected invitation to a VIP-only party. If the bouncer mistakenly lets in anyone with a simple name tag, they could waltz right into the event and enjoy all the privileges without a proper check. The vulnerability stems from a weak random token generation in the process_email_verification function, allowing attackers to exploit the reset_and_mail_activation_link process to bypass authentication checks.
This is absolutely devastating! An attacker can bypass authentication and log in as any user, including site administrators, simply by triggering the email verification process. This means they could potentially wreak havoc on your WooCommerce store—think unauthorized changes, data breaches, or even deleting critical information. Update the Booster for WooCommerce plugin to version 5.4.4 or later immediately. Additionally, consider disabling the Email Verification module if it's not absolutely necessary, and review all user accounts for suspicious activity. You've got this! Fixing this vulnerability will keep your site safe and sound. 🛡️