Booster for WooCommerce, eff37fad-7c19-43a1-a88d-0c10c1f75e16
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools [woocommerce-jetpack] < 7.1.0 Booster for WooCommerce < 7.1.0 - Shop Manager+ Missing Authorization to Arbitrary Options Update The plugin is vulnerable to unauthorized modification of data due to a missing capability check on the 'manage_options' function in versions up to, and including, 7.0.0. This makes it possible for authenticated attackers with Shop Manager privileges to update arbitrary site options.
- Affected versions
-
max 7.1.0.
- Status
-
vulnerable