Approved changes feed: RSS · Atom

cpe:2.3:a:booster:booster_for_woocommerce:*:*:*:*:plus:wordpress:*:*

part: a version: * update: *

VendorBooster (41b4194b-cf95-5787-aea4-bfeca0a44f9c)
ProductBooster For Woocommerce (620b0eaa-7336-5371-afd6-7cf1826be59b)
Edition*
Language*
Software editionplus
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/woocommerce-jetpack purl2cpe 2026-06-01 10:16:36.366077

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-52232 vulnerable 2026-06-08 06:17:54.513245 WordPress Booster Plus for WooCommerce plugin < 7.1.2 - Authenticated Arbitrary Post/Page Deletion Vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.2.
Published: 2024-06-09T09:06:30.847Z
Updated: 2026-04-28T16:09:07.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52231 vulnerable 2026-06-08 06:17:54.512772 WordPress Booster Plus for WooCommerce plugin < 7.1.2 - Auth. Sensitive Data Exposure vulnerability
MEDIUM (6.5)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.2.
Published: 2024-03-28T06:36:43.229Z
Updated: 2026-04-28T16:09:07.284Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52230 vulnerable 2026-06-08 06:17:54.511412 WordPress Booster Plus for WooCommerce plugin < 7.1.3 - Authenticated Arbitrary WordPress Option Disclosure Vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.3.
Published: 2024-06-09T09:08:27.920Z
Updated: 2026-04-28T16:09:07.294Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4016 vulnerable 2026-06-08 05:51:36.538468 Booster for WooCommerce - Custom Role Creation/Deletion via CSRF
The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.6, Booster Elite for WooCommerce WordPress plugin before 1.1.8 does not properly check for CSRF when creating and deleting Customer roles, allowing attackers to make logged admins create and delete arbitrary custom roles via CSRF attacks
Published: 2022-12-12T17:57:10.870Z
Updated: 2025-04-22T14:41:03.625Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3763 vulnerable 2026-06-08 05:48:22.302408 Booster for WooCommerce - Checkout Files Deletion via CSRF
The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not have CSRF check in place when deleting files uploaded at the checkout, allowing attackers to make a logged in shop manager or admin delete them via a CSRF attack
Published: 2022-11-21T00:00:00.000Z
Updated: 2025-04-30T15:37:34.468Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3762 vulnerable 2026-06-08 05:48:22.300574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.