Skip to content
Sign in
5.3 Medium

CVE-2024-2109 The Booster Extension plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and…

Description

The Booster Extension plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.0 via the 'booster_extension_authorbox_shortcode_display' function. This makes it possible for unauthenticated attackers to extract sensitive data including user emails

Affected products and versions

Product Affected versions Fixed in
Booster Extension 1.2 earliest → 1.2.0 No fix stated
booster_extension 1.2 earliest → 1.2.0 No fix stated
Track this CVE