Unauthenticated Product Data Exposure in WooCommerce Badge Plugin

Executive Summary

This vulnerability affects the WordPress plugin 'Sale Booster' versions 7.0.0 to 7.5.1. It allows unauthenticated users to access non-public product details, including titles, descriptions, and prices, even for draft, pending, or private products. The issue arises because the plugin fails to verify whether a product is published before sharing its information.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your WordPress site is running the 'Sale Booster' plugin version 7.0.0 to 7.5.1. You can verify the version via the WordPress admin panel under Plugins or by inspecting the plugin files. Test if unauthenticated users can access draft, pending, or private product details by attempting to view such products directly via their URLs.

Useful 0 Not Useful 0

Impact Analysis

Unauthenticated users could view sensitive product information that should be restricted, such as draft, pending, or private product details. This could lead to data leaks, competitive disadvantages, or unauthorized access to confidential pricing and descriptions.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate data protection regulations like GDPR by exposing personal or sensitive product data to unauthorized users. It may also conflict with HIPAA if product details include protected health information.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the 'Sale Booster' plugin to version 7.5.2 or later. If updating is not possible, consider temporarily disabling the plugin until the update is applied. Ensure all product visibility settings are correctly configured to restrict access to non-published products.

Useful 0 Not Useful 0