Pluggabl Booster For Woocommerce – Pdf Invoices, Abandoned Cart, Variation Swatches & 100+ Tools
10 CVEs affecting Pluggabl Booster For Woocommerce – Pdf Invoices, Abandoned Cart, Variation Swatches & 100+ Tools. Latest disclosed: 2025-08-29. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-13342 | High | 8.1 | 2025-08-29 | The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'add_files_to_order' functi… |
CVE-2024-12278 | High | 7.2 | 2025-04-01 | The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via any location that typically sanitizes data using wp_kses, lik… |
CVE-2024-3957 | Medium | 6.5 | 2024-05-02 | The Booster for WooCommerce plugin is vulnerable to Unauthenticated Arbitrary Shortcode Execution in versions up to, and including, 7.1.8. This allows unauthen… |
CVE-2024-1534 | Medium | 6.4 | 2024-03-07 | The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and includin… |
CVE-2024-1054 | Medium | 6.4 | 2024-02-29 | The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wcj_product_barcode' shortcode in all version… |
CVE-2023-5638 | Medium | 6.4 | 2023-10-19 | The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wcj_image' shortcode in versions up to, and including, 7.1.2… |
CVE-2023-4945 | Medium | 6.4 | 2023-09-14 | The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in versions up to, and including, 7.1.0 d… |
CVE-2024-9239 | Medium | 6.1 | 2024-11-20 | The Booster for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without app… |
CVE-2024-9170 | Medium | 5.5 | 2024-11-26 | The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wcj_product_meta shortcode in all versions up to… |
CVE-2023-4796 | Medium | 4.3 | 2023-10-20 | The Booster for WooCommerce for WordPress is vulnerable to Information Disclosure via the 'wcj_wp_option' shortcode in versions up to, and including, 7.1.0 due… |