Vulnerabilities

Filters

Reset all

1 selected

41 records

Sort

Vendor: pluggabl Clear all filters

TI-2023-30880 CVE-2023-25996 · GHSA-563f-4p3h-c4jm

Booster Elite for WooCommerce: Authenticated Arbitrary Option Disclosure

LOW 28

Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00212 Published 2026-10-12 Fixed in 8.4.0 CWE-201

TI-2026-70357 CVE-2026-42718 · GHSA-3777-f2vm-752j

PHP object injection in Booster for WooCommerce WordPress plugin

MEDIUM 49

Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00375 Published 2026-10-10 No fix listed CWE-502

TI-2026-40421 CVE-2026-56027 · GHSA-55c9-xmg9-j8rp

WordPress Booster for WooCommerce plugin <= 8.0.1 - Arbitrary File Upload vulnerability

MEDIUM 43

Customer Arbitrary File Upload in Booster for WooCommerce <= 8.0.1 versions.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00479 Published 2026-06-26 No fix listed CWE-434

TI-2026-25097 CVE-2026-32586 · GHSA-p5g2-8j3h-474p

WordPress Booster for WooCommerce plugin < 7.11.3 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booster for WooCommerce: from n/a thr…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00239 Published 2026-03-17 No fix listed CWE-862

TI-2025-39813 CVE-2025-64380 · GHSA-mvqr-h4j4-wph2

WordPress Booster for WooCommerce plugin <= 7.3.2 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Stored XSS.This issue affects Booster for WooCommerce: fro…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0017 Published 2025-11-13 No fix listed CWE-79

TI-2025-39812 CVE-2025-64379 · GHSA-6fqv-h56w-r958

WordPress Booster for WooCommerce plugin <= 7.4.0 - Broken Access Control vulnerability

LOW 19

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.002 Published 2025-11-13 No fix listed CWE-862

TI-2025-39639 CVE-2025-64196 · GHSA-cmjg-8wgr-32f6

WordPress Booster for WooCommerce plugin <= 7.2.5 - Cross Site Scripting (XSS) vulnerability

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Reflected XSS.This issue affects Booster for WooCommerce:…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00191 Published 2025-11-06 No fix listed CWE-79

TI-2024-12385 CVE-2024-13342 · GHSA-qqhq-9wvx-3f6c

Booster for WooCommerce <= 7.2.4 - Unauthenticated Double Extension Arbitrary File Upload

MEDIUM 44

The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'add_files_to_order' function in all versions up to, and including, 7.2.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00741 Published 2025-08-29 No fix listed CWE-434

TI-2025-26188 CVE-2025-39446 · GHSA-2gj6-8x44-7f5c

WordPress Booster Plus for WooCommerce plugin <= 7.2.4 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl LLC Booster Plus for WooCommerce allows Reflected XSS.This issue affects Booster Plus for WooCommerce: from n…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00238 Published 2025-05-19 No fix listed CWE-79

TI-2024-12747 CVE-2024-13708 · GHSA-9376-rv54-429x

Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site Scripting

LOW 37

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in versions 4.0.1 to 7.2.4 due to insufficient input sanitization and output escaping.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00287 Published 2025-04-04 No fix listed CWE-434

TI-2024-12783 CVE-2024-13744 · GHSA-gffv-vp66-96qc

Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload

MEDIUM 44

The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the validate_product_input_fields_on_add_to_cart function in versions 4.0.1 to 7.2.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00699 Published 2025-04-04 No fix listed CWE-434

TI-2024-11388 CVE-2024-12278 · GHSA-4cqc-m2p5-mfxw

Booster for WooCommerce <= 7.2.4 - Unauthenticated Stored Cross-Site Scripting

LOW 38

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via any location that typically sanitizes data using wp_kses, like comments, in all versions up to, and including, 7.2.4 due t…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00339 Published 2025-04-01 No fix listed CWE-79

TI-2024-08514 CVE-2024-9170 · GHSA-r96p-gqpg-mpgw

Cross-site scripting in pluggabl Booster for WooCommerce – PDF Invoices, Abandoned Cart…

LOW 25

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wcj_product_meta shortcode in all versions up to, and including, 7.2.3 due to insufficient input sanitization…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00463 Published 2024-11-26 No fix listed CWE-79

TI-2024-08575 CVE-2024-9239 · GHSA-fhq3-7h78-8m2w

Booster for WooCommerce <= 7.2.3 - Reflected Cross-Site Scripting

LOW 28

The Booster for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and inclu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00431 Published 2024-11-20 No fix listed CWE-79

TI-2023-28658 CVE-2023-52230 · GHSA-7rxg-g96w-25cm

Missing authorization in pluggabl Booster Plus for WooCommerce

LOW 29

Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00353 Published 2024-06-09 Fixed in 7.1.3 CWE-862

TI-2023-28660 CVE-2023-52232 · GHSA-8cw5-9cww-c669

WordPress Booster Plus for WooCommerce plugin < 7.1.2 - Authenticated Arbitrary Post/Page Deletion Vulnerability

LOW 29

Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00339 Published 2024-06-09 Fixed in 7.1.2 CWE-862

TI-2023-28163 CVE-2023-51511 · GHSA-98p9-rpw9-qmj6

WordPress Booster Elite for WooCommerce plugin < 7.1.3 - Authenticated Production Creation/Modification Vulnerability

LOW 29

Improper Authentication vulnerability in Pluggabl LLC Booster Elite for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booster Elite for WooCommerce: from n/a before 7.1.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00373 Published 2024-06-04 Fixed in 7.1.3 CWE-287

TI-2023-26577 CVE-2023-48747 · GHSA-rjrv-98g6-3695

WordPress Booster for WooCommerce plugin <= 7.1.2 - Authenticated Production Creation/Modification Vulnerability

LOW 38

Improper Authentication vulnerability in Pluggabl LLC Booster for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booster for WooCommerce: from n/a through 7.1.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00405 Published 2024-06-04 No fix listed CWE-287

TI-2024-03692 CVE-2024-3957 · GHSA-9w9h-rrwj-7788

Booster for WooCommerce <= 7.1.8 - Unauthenticated Arbitrary Shortcode Execution

MEDIUM 40

The Booster for WooCommerce plugin is vulnerable to Unauthenticated Arbitrary Shortcode Execution in versions up to, and including, 7.1.8.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00884 Published 2024-05-02 No fix listed CWE-94

TI-2023-28659 CVE-2023-52231 · GHSA-3cvx-3rj3-cchm

WordPress Booster Plus for WooCommerce plugin < 7.1.2 - Auth. Sensitive Data Exposure vulnerability

LOW 29

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00529 Published 2024-03-28 Fixed in 7.1.2 CWE-200

TI-2023-28662 CVE-2023-52234 · GHSA-69fm-ffh7-6h57

WordPress Booster Elite for WooCommerce plugin < 7.1.2 - Auth. Sensitive Data Exposure vulnerability

LOW 29

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Elite for WooCommerce.This issue affects Booster Elite for WooCommerce: from n/a before 7.1.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00529 Published 2024-03-28 Fixed in 7.1.2 CWE-200

TI-2024-19536 CVE-2024-29760 · GHSA-rrxj-gwvr-gfp8

WordPress Booster for WooCommerce plugin <= 7.1.8 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl LLC Booster for WooCommerce allows Reflected XSS.This issue affects Booster for WooCommerce: from n/a through…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00421 Published 2024-03-27 No fix listed CWE-79

TI-2024-01848 CVE-2024-1986 · GHSA-f662-26vh-3x9f

Elite Booster for WooCommerce <= 7.1.7 - Authenticated (Subscriber+) Arbitrary File Upload

MEDIUM 43

The Booster Elite for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wc_add_new_product() function in all versions up to, and including, 7.1.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01281 Published 2024-03-07 No fix listed CWE-434

TI-2024-01431 CVE-2024-1534 · GHSA-8xvw-38qv-7f9f

Booster for WooCommerce <= 7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde

LOW 28

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 7.1.7 due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0032 Published 2024-03-07 No fix listed CWE-20

TI-2024-00975 CVE-2024-1054 · GHSA-5x9h-vvfq-mc7m

Booster for WooCommerce <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wcj_product_barcode' shortcode in all versions up to, and including, 7.1.6 due to insufficient input sanitiz…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0034 Published 2024-02-20 No fix listed CWE-79