Information Disclosure Vulnerability in Booster for WooCommerce by WordPress

CVE-2023-4796

Summary

The Booster for WooCommerce plugin for WordPress contains a vulnerability that enables authenticated attackers with subscriber-level access or higher to exploit the 'wcj_wp_option' shortcode. This vulnerability stems from inadequate controls on the information that can be accessed through the shortcode, allowing attackers to retrieve sensitive site options. It is imperative for users to update to a secure version to mitigate any potential risks associated with this flaw.

References