CVE-2022-3763 in Booster for WooCommerce Plugin
Summary
The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not have CSRF check in place when deleting files uploaded at the checkout, allowing attackers to make a logged in shop manager or admin delete them via a CSRF attack
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
10/31/2022
Disclosure
11/21/2022
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 214062 | Booster for WooCommerce Plugin cross-site request forgery | 352 | Not defined | Official fix | CVE-2022-3763 |