Log in Start free

Pluggabl

Products

ProductCVEsExploitedLatest
Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools10–Aug 29, 2025
Booster for WooCommerce8–Oct 10, 2026
Booster Elite for WooCommerce1–Mar 7, 2024

Exploited and recent CVEs

  • CVE-2026-42718 Critical 9.8 WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-56027 Critical 9.9 WordPress Booster for WooCommerce plugin <= 8.0.1 - Arbitrary File Upload vulnerability 0.5%
  • CVE-2026-32586 Medium 5.3 WordPress Booster for WooCommerce plugin < 7.11.3 - Broken Access Control vulnerability 0.2%
  • CVE-2025-64380 Medium 6.5 WordPress Booster for WooCommerce plugin <= 7.3.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-64379 Medium 4.3 WordPress Booster for WooCommerce plugin <= 7.4.0 - Broken Access Control vulnerability 0.2%
  • CVE-2025-64196 High 7.1 WordPress Booster for WooCommerce plugin <= 7.2.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-13342 High 8.1 Booster for WooCommerce <= 7.2.4 - Unauthenticated Double Extension Arbitrary File Upload 0.7%
  • CVE-2024-13708 High 7.2 Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site Scripting 0.3%
  • CVE-2024-13744 High 8.1 Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload 0.7%
  • CVE-2024-12278 High 7.2 Booster for WooCommerce <= 7.2.4 - Unauthenticated Stored Cross-Site Scripting 0.3%
  • CVE-2024-9170 Medium 5.5 Booster for WooCommerce <= 7.2.3 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta Shortcode 0.5%
  • CVE-2024-9239 Medium 6.1 Booster for WooCommerce <= 7.2.3 - Reflected Cross-Site Scripting 0.4%
  • CVE-2024-3957 Medium 6.5 Booster for WooCommerce <= 7.1.8 - Unauthenticated Arbitrary Shortcode Execution 0.9%
  • CVE-2024-1986 High 8.8 Elite Booster for WooCommerce <= 7.1.7 - Authenticated (Subscriber+) Arbitrary File Upload 1.3%
  • CVE-2024-1534 Medium 6.4 Booster for WooCommerce <= 7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde 0.3%
  • CVE-2024-1054 Medium 6.4 Booster for WooCommerce <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2023-4796 Medium 4.3 Booster for WooCommerce <= 7.1.0 - Authenticated (Subscriber+) Information Disclosure via Shortcode 0.7%
  • CVE-2023-5638 Medium 6.4 Booster for WooCommerce <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.6%
  • CVE-2023-4945 Medium 6.4 Booster for WooCommerce <= 7.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.6%