Medium · 6.5 CVE-2023-25996 EUVD-2023-60710GHSA-563f-4p3h-c4jm

WordPress Booster Elite for WooCommerce plugin < 8.4.0 - Authenticated Arbitrary WordPress Option Disclosure vulnerability

Published Oct 12, 2026 · Updated Oct 12, 2026 · Assigned by Patchstack

Vendor: Pluggabl Product: Booster Elite for WooCommerce Category: Web / CMS

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce booster-elite-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Booster Elite for WooCommerce: from n/a before 8.4.0.

Affected products

Vendor	Product	Affected	Fixed
Pluggabl LLC.	Booster Elite for WooCommerce	< 8.4.0	8.4.0

References

https://patchstack.com/database/wordpress/plugin/booster-elite-for-woocommerce/vulnerability/wordpress-booster-elite-for-woocommerce-plugin-8-4-0-authenticated-arbitrary-wordpress-option-disclosure-vulnerability?_s_id=cve vdb-entry