Lucene search
WPScanCVELIST:CVE-2022-4016HistoryDec 12, 2022 - 5:57 p.m.
CVE-2022-4016 Booster for WooCommerce - Custom Role Creation/Deletion via CSRF
2022-12-1217:57:10
WPScan
www.cve.org
2
wordpress plugin
csrf
customer roles
arbitrary
admins
EPSS
0.001
Percentile
34.1%
The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.6, Booster Elite for WooCommerce WordPress plugin before 1.1.8 does not properly check for CSRF when creating and deleting Customer roles, allowing attackers to make logged admins create and delete arbitrary custom roles via CSRF attacks
CNA Affected
[
{
"vendor": "Unknown",
"product": "Booster for WooCommerce",
"collectionURL": "https://wordpress.org/plugins",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "5.6.7"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Booster Plus for WooCommerce",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "5.6.6"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Unknown",
"product": "Booster Elite for WooCommerce",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "1.1.8"
}
],
"defaultStatus": "unaffected"
}
]Related
cve
cve
CVE-2022-4016
2022-12-12 18:15:13
wpexploit
wpexploit
Booster for WooCommerce - Custom Role Creation/Deletion via CSRF
2022-11-21 00:00:00
wpvulndb
wpvulndb
Booster for WooCommerce - Custom Role Creation/Deletion via CSRF
2022-11-21 00:00:00
nvd
nvd
CVE-2022-4016
2022-12-12 18:15:13
prion
prion
Cross site request forgery (csrf)
2022-12-12 18:15:00