Booster Plus For Woocommerce vulnerabilities

2 vulnerabilities

Known vulnerabilities in Booster Plus For Woocommerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2022-4227boosterbooster_elite_for_woocommerce+8
EPSS score
0.42%
The Booster for WooCommerce WordPress plugin before 5.6.3, Booster Plus for WooCommerce WordPress plugin before 6.0.0, Booster Elite for WooCommerce WordPress plugin before 6.0.0 do not escape some URLs and parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting6.5CVE-2023-52231boosterbooster_for_woocommerce+2
EPSS score
0.53%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.2.