← CVE Intelligence

CVE-2022-4017

Booster for WooCommerce - Multiple CSRF PUBLISHED

Description (CNA)

The Booster for WooCommerce WordPress plugin before 6.0.1, Booster Plus for WooCommerce WordPress plugin before 6.0.1, Booster Elite for WooCommerce WordPress plugin before 6.0.1 have either flawed CSRF checks or are missing them completely in numerous places, allowing attackers to make logged in users perform unwanted actions via CSRF attacks

Affected (CNA)

Vendor / productVersions
Unknown / Booster for WooCommerceaffected 0 before 6.0.1
Unknown / Booster Plus for WooCommerceaffected 0 before 6.0.1
Unknown / Booster Elite for WooCommerceaffected 0 before 6.0.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.