CVE-2022-4017

Booster for WooCommerce - Multiple CSRF

High · published January 23, 2023

CVSS v3.1
8.8
EPSS
0%
Percentile
26.1
In the wild
Unconfirmed
What it is

The Booster for WooCommerce WordPress plugin before 6.0.1, Booster Plus for WooCommerce WordPress plugin before 6.0.1, Booster Elite for WooCommerce WordPress plugin before 6.0.1 have either flawed CSRF checks or are missing them completely in numerous places, allowing attackers to make logged in users perform unwanted actions via CSRF attacks

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00339 · 26.1th percentile
Published
2023-01-23T14:31Z
EPSS history
Timeline
  • 23 JAN 14:31Z
    Booster for WooCommerce - Multiple CSRF
    cvelistv5