Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
BoosterBooster For Woocommerce

13 matches found

CVE
CVE•added 2024/06/04 11:15 a.m.•77 views

CVE-2023-48747

Improper Authentication vulnerability in Pluggabl LLC Booster for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booster for WooCommerce: from n/a through 7.1.2.

8.8CVSS6.6AI score0.00703EPSS
CVE
CVE•added 2024/02/29 1:43 a.m.•70 views

CVE-2024-1054

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's'wcj_product_barcode' shortcode in all versions up to, and including, 7.1.6 due to insufficient input sanitization and output escaping on user supplied attributes like 'color'. This makes i...

6.4CVSS6AI score0.00148EPSS
CVE
CVE•added 2024/03/28 7:15 a.m.•58 views

CVE-2023-52234

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Elite for WooCommerce.This issue affects Booster Elite for WooCommerce: from n/a before 7.1.2.

6.5CVSS6.4AI score0.00425EPSS
CVE
CVE•added 2024/11/26 9:15 a.m.•56 views

CVE-2024-9170

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wcj_product_meta shortcode in all versions up to, and including, 7.2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for au...

5.5CVSS5.1AI score0.00086EPSS
CVE
CVE•added 2024/03/07 9:15 p.m.•54 views

CVE-2024-1986

The Booster Elite for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wc_add_new_product() function in all versions up to, and including, 7.1.7. This makes it possible for customer-level attackers, and above, to upload arbitrary fi...

8.8CVSS9.3AI score0.05759EPSS
CVE
CVE•added 2024/03/28 7:15 a.m.•53 views

CVE-2023-52231

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.2.

6.5CVSS6.4AI score0.00425EPSS
CVE
CVE•added 2024/05/02 5:15 p.m.•49 views

CVE-2024-3957

The Booster for WooCommerce plugin is vulnerable to Unauthenticated Arbitrary Shortcode Execution in versions up to, and including, 7.1.8. This allows unauthenticated attackers to execute arbitrary shortcodes. The severity and exploitability depends on what other plugins are installed and what shor...

7.3CVSS9.7AI score0.00406EPSS
CVE
CVE•added 2024/03/07 10:15 a.m.•47 views

CVE-2024-1534

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 7.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated at...

6.4CVSS6AI score0.00127EPSS
CVE
CVE•added 2024/03/27 2:15 p.m.•47 views

CVE-2024-29760

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl LLC Booster for WooCommerce allows Reflected XSS.This issue affects Booster for WooCommerce: from n/a through 7.1.7.

7.1CVSS7.1AI score0.00198EPSS
CVE
CVE•added 2024/06/09 9:15 a.m.•46 views

CVE-2023-52232

Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.2.

6.5CVSS6.5AI score0.00152EPSS
CVE
CVE•added 2024/06/09 9:15 a.m.•44 views

CVE-2023-52230

Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.3.

6.5CVSS6.5AI score0.00284EPSS
CVE
CVE•added 2024/11/20 7:15 a.m.•41 views

CVE-2024-9239

The Booster for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 7.2.3. This makes it possible for unauthenticated attackers to inject arb...

6.1CVSS6AI score0.00207EPSS
CVE
CVE•added 2024/06/04 1:15 p.m.•29 views

CVE-2023-51511

Improper Authentication vulnerability in Pluggabl LLC Booster Elite for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booster Elite for WooCommerce: from n/a before 7.1.3.

6.5CVSS6.5AI score0.00261EPSS