Watch Out Wednesday – October 11, 2023

Plugin: Geo Controller

Vulnerability: Authenticated (Administrator+) Stored Cross-Site Scripting
Patched Version: 8.5.3
Recommended Action: Update to version 8.5.3, or a newer patched version

Plugin: Booster for WooCommerce

Vulnerability: Authenticated (Subscriber+) Information Disclosure via Shortcode
Patched Version: 7.1.2
Recommended Action: Update to version 7.1.2, or a newer patched version

Plugin: Customer Reviews for WooCommerce

Vulnerability: Missing Authorization
Patched Version: 5.36.1
Recommended Action: Update to version 5.36.1, or a newer patched version