Vulnerability Description
The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not validate files to download in some of its modules, which could allow ShopManager and Admin to download arbitrary files from the server even when they are not supposed to be able to (for example in multisite)
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Booster | Booster For Woocommerce | < 1.1.7 |
References
- https://wpscan.com/vulnerability/96ef4bb8-a054-48ae-b29c-b3060acd01acExploitThird Party Advisory
- https://wpscan.com/vulnerability/96ef4bb8-a054-48ae-b29c-b3060acd01acExploitThird Party Advisory
FAQ
What is CVE-2022-3762?
CVE-2022-3762 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not validate files...
How severe is CVE-2022-3762?
CVE-2022-3762 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-3762?
Check the references section above for vendor advisories and patch information. Affected products include: Booster Booster For Woocommerce.