Skip to content
OpenAdvisories

Vendor

Pluggabl

30 known vulnerabilities.

3 results · Clear filters · Feed

  • Critical 9.8

    WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.

  • Critical 9.9

    WordPress Booster for WooCommerce plugin <= 8.0.1 - Arbitrary File Upload vulnerability

    Customer Arbitrary File Upload in Booster for WooCommerce <= 8.0.1 versions.

  • Critical 9.8
    CVE-2021-34646 Public exploit EPSS 51%

    Booster for WooCommerce <= 5.4.3 Authentication Bypass

    Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the process_email_verification function due to a random token generation weakness in the reset_and_mail_activation_link function …