| CVE-2024-3957 | Date: (C)2024-05-02 (M)2024-05-03 |
The Booster for WooCommerce plugin is vulnerable to Unauthenticated Arbitrary Shortcode Execution in versions up to, and including, 7.1.8. This allows unauthenticated attackers to execute arbitrary shortcodes. The severity and exploitability depends on what other plugins are installed and what shortcode functionality they provide.
CVSS Score and Metrics +CVSS Score and Metrics -| CVSS V3 Severity: | CVSS V2 Severity: |
| CVSS Score : 6.5 | CVSS Score : |
| Exploit Score: 3.9 | Exploit Score: |
| Impact Score: 2.5 | Impact Score: |
| |
| CVSS V3 Metrics: | CVSS V2 Metrics: |
| Attack Vector: NETWORK | Access Vector: |
| Attack Complexity: LOW | Access Complexity: |
| Privileges Required: NONE | Authentication: |
| User Interaction: NONE | Confidentiality: |
| Scope: UNCHANGED | Integrity: |
| Confidentiality: NONE | Availability: |
| Integrity: LOW | |
| Availability: LOW | |
| | |
