174 matches found
CVE-2026-42718
Unauthenticated PHP Object Injection in Booster for WooCommerce = 8.4.0 versions...
CVE-2026-42718 WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Booster for WooCommerce = 8.4.0 versions...
EUVD-2026-96450
Unauthenticated PHP Object Injection in Booster for WooCommerce = 8.4.0 versions...
CVE-2026-42718
The Booster for WooCommerce WordPress plugin (versions
CVE-2026-42718: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Booster for WooCommerce = 8.4.0 versions...
WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by John Ryan Albon in WordPress Plugin Booster for WooCommerce versions = 8.4.0...
CVE-2026-39750
Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...
CVE-2026-39750 WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...
EUVD-2026-93259
Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...
CVE-2026-39750 WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...
CVE-2026-39750
The StoreGrowth: Smart Sales Booster for WooCommerce plugin (versions
CVE-2026-39750: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...
PT-2026-106424
Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...
WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Pedro Pinho in WordPress Plugin StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart versions = 2.0.6...
CVE-2026-66466: Missing Authorization
Unauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.1.1 versions...
CVE-2026-15411: Missing Authorization
The StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0. This is due to the plugin not properly verifying that a user is authorized to perfor...
CVE-2026-13440: Improper Neutralization of Input During Web Page Generation
The StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'messagepopup' parameter in all versions up to, and including, 2.1.0 due to insufficient input sanitization and...
CVE-2026-56027
Customer Arbitrary File Upload in Booster for WooCommerce = 8.0.1 versions...