PT-2023-30660 · WordPress · Booster For Woocommerce

István Márton + 1 · Published 2023-10-20 · Updated 2023-10-27 · CVE-2023-4796

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions The Booster for WooCommerce for WordPress versions up to, and including, 7.1.0

Description The issue allows authenticated attackers with subscriber-level capabilities or above to retrieve arbitrary sensitive site options due to insufficient controls on the information retrievable via the wcj wp option shortcode.

Recommendations For versions up to, and including, 7.1.0, consider disabling the wcj wp option shortcode until a patch is available to prevent potential information disclosure.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2023-4796

Affected Products

Booster For Woocommerce

References · 7

• 🔥 https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/tags/7.1.0/includes/shortcodes/class-wcj-general-shortcodes.php#L450 · Exploit
• https://plugins.trac.wordpress.org/changeset/2966325/woocommerce-jetpack#file1 · Patch
• https://osv.dev/vulnerability/CVE-2023-4796 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4796 · Security Note
• https://wordfence.com/threat-intel/vulnerabilities/id/a4cd49b2-ff93-4582-906b-b690d8472c38?source=cve · Patch
• https://twitter.com/VulmonFeeds/status/1715315519870414959 · Twitter Post
• https://twitter.com/CVEnew/status/1715271106242769010 · Twitter Post