Update the WordPress Booster for WooCommerce plugin to the latest available version (at least 5.6.7).
WPScan discovered and reported this Arbitrary File Download vulnerability in WordPress Booster for WooCommerce Plugin. This could allow a malicious actor to download any file from your website. This includes but is not limited to files that contain login credentials or backup files. This vulnerability has been fixed in version 5.6.7.
Multiple CSRF vulnerability
03.01.2023
CrossSite Request Forgery (CSRF) vulnerability
21.11.2022
CrossSite Request Forgery (CSRF) vulnerability
31.10.2022
CrossSite Request Forgery (CSRF) vulnerability
28.10.2022
Authenticated Order Status Update vulnerability
19.09.2022