CVE-2024-3957: Booster for WooCommerce <= 7.1.8 - Unauthenticated Arbitrary Shortcode Execution
The Booster for WooCommerce plugin is vulnerable to Unauthenticated Arbitrary Shortcode Execution in versions up to, and including, 7.1.8. This allows unauthenticated attackers to execute arbitrary shortcodes. The severity and exploitability depends on what other plugins are installed and what shortcode functionality they provide.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3957?
CVE-2024-3957 is classified with a severity that varies based on the plugins installed alongside Booster for WooCommerce.
How do I fix CVE-2024-3957?
To fix CVE-2024-3957, upgrade the Booster for WooCommerce plugin to version 7.1.9 or later.
Who is affected by CVE-2024-3957?
Anyone using Booster for WooCommerce versions up to and including 7.1.8 is affected by CVE-2024-3957.
What can an attacker do with CVE-2024-3957?
An attacker exploiting CVE-2024-3957 can execute arbitrary shortcodes without authentication.
Is there a known exploit for CVE-2024-3957?
The exploitability of CVE-2024-3957 depends on the specific setup and configuration of other plugins in use.