All vulnerabilities
CVE-2023-25996

WordPress Booster Elite for WooCommerce plugin < 8.4.0 - Authenticated Arbitrary WordPress Option Disclosure vulnerability

Pluggabl LLC. Booster Elite for WooCommerce
Open in ThreatlineRecord JSON
CVSS
6.5Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.27%Chance of exploitation activity in the next 30 days, higher than 18% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in8.4.0Fixed versionCVE List
Published12 Oct 2026Updated 12 Oct 2026CVE List

What fixes it

  • 8.4.0Booster Elite for WooCommerceCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce booster-elite-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Booster Elite for WooCommerce: from n/a before 8.4.0.

Text from CVE List

Affected versions 1

  • Booster Elite for WooCommerceaffected: all versions before 8.4.0CVE List

References 1