Dave Jong (Patchstack)
CVE-2023-25996: Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce booster-elite-for-woocommerce allows Retrieve Emb
CVE-2023-25996 Oct 12, 2026 Source: Vendor
Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce booster-elite-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Booster Elite for WooCommerce: from n/a before 8.4.0.
[repair-cna-vendors] 2026-10-19: Vendor corrected from "Patchstack" (the CNA) to "Dave Jong (Patchstack)" from the CVE.org record. Credits also filed under: Pluggabl LLC. (#4223).
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://nvd.nist.gov/vuln/detail/CVE-2023-25996
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2023-25996
BR2026-0000-024895
unclaimed
Credited as Dave Jong (Patchstack) in WordPress Plugin Booster Elite for WooCommerce (versions
CVE-2023-25996
BR2026-0000-026608
unclaimed
Credited as Dave Jong (Patchstack)