What is the CVSS score of CVE-2022-3763?

CVE-2022-3763 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H. EPSS exploitation probability: 0.4%.

Is there a public PoC exploit available for CVE-2022-3763?

Yes, a public proof-of-concept exploit is available for CVE-2022-3763. Prioritise patching immediately. EPSS: 0.4%.

Booster For Woocommerce CVE-2022-3763

HIGH

2022-11-21 contact@wpscan.com

CSRF WordPress Booster For Woocommerce

8.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.1 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Nov 21, 2022 - 11:15 nvd

HIGH 8.1

DescriptionNVD

The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not have CSRF check in place when deleting files uploaded at the checkout, allowing attackers to make a logged in shop manager or admin delete them via a CSRF attack

AnalysisAI

The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not have CSRF. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Booster For Woocommerce

View all

CVE-2021-34646 CRITICAL Act Now POC

9.8 Aug 30

Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication b

CVE-2024-1986 HIGH Act Now

8.8 Mar 07

The Booster Elite for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type

CVE-2022-4016 MEDIUM This Month POC

6.5 Dec 12

The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.6, B

CVE-2022-3762 MEDIUM This Month POC

6.5 Nov 21

The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, B

CVE-2024-13744 HIGH This Week

8.1 Apr 04

The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valida

CVE-2023-4796 MEDIUM This Month POC

4.3 Oct 20

The Booster for WooCommerce for WordPress is vulnerable to Information Disclosure via the 'wcj_wp_option' shortcode in v

CVE-2024-13708 HIGH This Week

7.2 Apr 04

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in ve

CVE-2024-29760 HIGH This Week

7.1 Mar 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl LLC Boost

CVE-2023-52234 MEDIUM This Month

6.5 Mar 28

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Elite for WooCommerce.1.2. R

CVE-2023-52231 MEDIUM This Month

6.5 Mar 28

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Plus for WooCommerce.1.2. Ra

CVE-2023-48333 MEDIUM This Month

6.5 Nov 30

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pluggabl LLC Booster for WooCommerce.1.1. Ra

CVE-2024-3957 MEDIUM This Month

6.5 May 02

The Booster for WooCommerce plugin is vulnerable to Unauthenticated Arbitrary Shortcode Execution in versions up to, and

Same technique CSRF

View all

CVE-2016-6277 HIGH POC

8.8

CVE-2014-100005 HIGH POC

8.0

CVE-2017-9757 HIGH POC

8.8

CVE-2013-5696 MEDIUM POC

6.8

CVE-2013-4152 MEDIUM POC

6.8

CVE-2024-7094 CRITICAL

9.8

CVE-2015-4624 HIGH POC

7.5

CVE-2020-36836 HIGH POC

8.0

CVE-2022-3763 vulnerability details – vuln.today

Back