CVE-2025-64379

Medium · 4.3

CVSS

4.3

EPSS

0.2%

Published

Nov 13, 2025

CISA due date

—

The record

Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booster for WooCommerce: from n/a through <= 7.4.0.

Affected packages

Ecosystem	Package	Introduced	Fixed