Medium · 6.5 CVE-2023-52231 EUVD-2023-56904GHSA-3cvx-3rj3-cchm

WordPress Booster Plus for WooCommerce plugin < 7.1.2 - Auth. Sensitive Data Exposure vulnerability

Published Mar 28, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Booster Product: Booster Plus for WooCommerce Category: Web / CMS

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.2.

Affected products

Vendor	Product	Affected	Fixed
Booster	Booster Plus for WooCommerce	< 7.1.2	7.1.2

References

https://patchstack.com/database/vulnerability/booster-plus-for-woocommerce/wordpress-booster-plus-for-woocommerce-plugin-7-1-2-authenticated-arbitrary-order-information-disclosure-vulnerability?_s_id=cve vdb-entry