Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 04:53:21 +0000 CVE-2022-3762 — Booster for WooCommerce - ShopManager+ Arbitrary File Download https://cve.radiocsirt.org/vuln/cve-2022-3762 <p><strong>Affected:</strong> Unknown Booster for WooCommerce, Unknown Booster Plus for WooCommerce, Unknown Booster Elite for WooCommerce</p> <p>The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not validate files to download in some of its modules, which could allow ShopManager and Admin to download arbitrary files from the server even when they are not supposed to be able to (for example in multisite)</p> <p><strong>Affected:</strong> Unknown Booster for WooCommerce, Unknown Booster Plus for WooCommerce, Unknown Booster Elite for WooCommerce</p> <p>The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not validate files to download in some of its modules, which could allow ShopManager and Admin to download arbitrary files from the server even when they are not supposed to be able to (for example in multisite)</p> https://cve.radiocsirt.org/vuln/cve-2022-3762