Skip to content
OpenAdvisories

Vendor

Pluggabl

29 known vulnerabilities.

Products

Booster for WooCommerce 12 Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools 10 Booster Plus for WooCommerce 3 Booster Elite for WooCommerce 2 Booster for WooCommerce (WordPress plugin) 1 Booster for WooCommcerce 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.1
    CVE-2025-64196

    WordPress Booster for WooCommerce plugin <= 7.2.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Reflected XSS.This issue affects Booster for WooCommerce: from n/a through <= 7.2.5.

    Pluggabl Booster for WooCommerce Web / CMS
  • High 8.1
    CVE-2024-13342

    Booster for WooCommerce <= 7.2.4 - Unauthenticated Double Extension Arbitrary File Upload

    The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'add_files_to_order' function in all versions up to, and including, 7.2.4. This makes it possible for unauthenticated attackers…

    Pluggabl Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools Web / CMS
  • High 7.1
    CVE-2025-39446

    WordPress Booster Plus for WooCommerce plugin <= 7.2.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl LLC Booster Plus for WooCommerce allows Reflected XSS.This issue affects Booster Plus for WooCommerce: from n/a through 7.2.4.

    Pluggabl Booster Plus for WooCommerce Web / CMS
  • High 7.2
    CVE-2024-13708

    Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site Scripting

    The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in versions 4.0.1 to 7.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to i…

    Pluggabl Booster for WooCommerce Web / CMS
  • High 8.1
    CVE-2024-13744

    Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload

    The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the validate_product_input_fields_on_add_to_cart function in versions 4.0.1 to 7.2.4. This makes it possible for unauthenticated at…

    Pluggabl Booster for WooCommerce Web / CMS
  • High 7.2
    CVE-2024-12278

    Booster for WooCommerce <= 7.2.4 - Unauthenticated Stored Cross-Site Scripting

    The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via any location that typically sanitizes data using wp_kses, like comments, in all versions up to, and including, 7.2.4 due to insufficient input sanitization and o…

    Pluggabl Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools Web / CMS
  • High 7.1
    CVE-2024-29760

    WordPress Booster for WooCommerce plugin <= 7.1.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl LLC Booster for WooCommerce allows Reflected XSS.This issue affects Booster for WooCommerce: from n/a through 7.1.7.

    Pluggabl Booster for WooCommerce Web / CMS
  • High 8.8
    CVE-2024-1986

    Elite Booster for WooCommerce <= 7.1.7 - Authenticated (Subscriber+) Arbitrary File Upload

    The Booster Elite for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wc_add_new_product() function in all versions up to, and including, 7.1.7. This makes it possible for customer-level atta…

    Pluggabl Booster Elite for WooCommerce Web / CMS