What’s Vulnerable › Products

pluggabl Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools vulnerabilities

40 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Check whether your pluggabl Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools version is affected

Latest pluggabl Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools vulnerabilities

• CVE-2026-42718 — WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability (CVSS 9.8)
• CVE-2026-56027 — WordPress Booster for WooCommerce plugin <= 8.0.1 - Arbitrary File Upload vulnerability (CVSS 9.9)
• CVE-2026-32586 — WordPress Booster for WooCommerce plugin < 7.11.3 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-64380 — WordPress Booster for WooCommerce plugin <= 7.3.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-64379 — WordPress Booster for WooCommerce plugin <= 7.4.0 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2025-64196 — WordPress Booster for WooCommerce plugin <= 7.2.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2024-13342 — Booster for WooCommerce <= 7.2.4 - Unauthenticated Double Extension Arbitrary File Upload (CVSS 9.8)
• CVE-2025-39446 — WordPress Booster Plus for WooCommerce plugin <= 7.2.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2024-13708 — Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2)
• CVE-2024-13744 — Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload (CVSS 9.8)
• CVE-2024-12278 — Booster for WooCommerce <= 7.2.4 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)
• CVE-2024-9170 — Booster for WooCommerce <= 7.2.3 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta Shortcode (CVSS 4.8)
• CVE-2024-9239 — Booster for WooCommerce <= 7.2.3 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2023-52232 — WordPress Booster Plus for WooCommerce plugin < 7.1.2 - Authenticated Arbitrary Post/Page Deletion Vulnerability (CVSS 6.5)
• CVE-2023-52230 — WordPress Booster Plus for WooCommerce plugin < 7.1.3 - Authenticated Arbitrary WordPress Option Disclosure Vulnerability (CVSS 6.5)
• CVE-2023-51511 — WordPress Booster Elite for WooCommerce plugin < 7.1.3 - Authenticated Production Creation/Modification Vulnerability (CVSS 6.5)
• CVE-2023-48747 — WordPress Booster for WooCommerce plugin <= 7.1.2 - Authenticated Production Creation/Modification Vulnerability (CVSS 8.8)
• CVE-2024-3957 — Booster for WooCommerce <= 7.1.8 - Unauthenticated Arbitrary Shortcode Execution (CVSS 7.3)
• CVE-2023-52234 — WordPress Booster Elite for WooCommerce plugin < 7.1.2 - Auth. Sensitive Data Exposure vulnerability (CVSS 6.5)
• CVE-2023-52231 — WordPress Booster Plus for WooCommerce plugin < 7.1.2 - Auth. Sensitive Data Exposure vulnerability (CVSS 6.5)
• CVE-2024-29760 — WordPress Booster for WooCommerce plugin <= 7.1.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2024-1986 — Elite Booster for WooCommerce <= 7.1.7 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)
• CVE-2024-1534 — Booster for WooCommerce <= 7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde (CVSS 5.4)
• CVE-2024-1054 — Booster for WooCommerce <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2023-48333 — WordPress Booster for WooCommerce Plugin <= 7.1.1 is vulnerable to Sensitive Data Exposure (CVSS 6.5)