CVE-2021-34646: Booster for WooCommerce <= 5.4.3 Authentication Bypass
First published: Mon Aug 30 2021(Updated: )
Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the process_email_verification function due to a random token generation weakness in the reset_and_mail_activation_link function found in the ~/includes/class-wcj-emails-verification.php file. This allows attackers to impersonate users and trigger an email address verification for arbitrary accounts, including administrative accounts, and automatically be logged in as that user, including any site administrators. This requires the Email Verification module to be active in the plugin and the Login User After Successful Verification setting to be enabled, which it is by default.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Booster for WooCommerce | <=5.4.3 |
Remedy
Update to version 5.4.4 or newer.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-34646.
What is the severity of CVE-2021-34646?
The severity of CVE-2021-34646 is critical with a score of 9.8.
Which versions of the Booster for WooCommerce WordPress plugin are affected?
Versions up to and including 5.4.3 of the Booster for WooCommerce WordPress plugin are affected.
How does the vulnerability in Booster for WooCommerce work?
The vulnerability in Booster for WooCommerce allows authentication bypass via the process_email_verification function due to a random token generation weakness in the reset_and_mail_activation_link function.
How can I fix the vulnerability in Booster for WooCommerce?
Update to a version higher than 5.4.3 of the Booster for WooCommerce WordPress plugin, as this vulnerability has been patched.
- agent/references
- agent/weakness
- agent/type
- agent/softwarecombine
- agent/description
- agent/author
- agent/severity
- agent/title
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/booster
- canonical/booster for woocommerce
- version/booster for woocommerce/5.4.3