Approved changes feed: RSS · Atom

cpe:2.3:a:booster:booster_for_woocommerce:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorBooster (41b4194b-cf95-5787-aea4-bfeca0a44f9c)
ProductBooster For Woocommerce (620b0eaa-7336-5371-afd6-7cf1826be59b)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/woocommerce-jetpack purl2cpe 2026-06-01 10:16:36.368367

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-64380 vulnerable 2026-06-08 07:39:18.445271 WordPress Booster for WooCommerce plugin <= 7.3.2 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Stored XSS.This issue affects Booster for WooCommerce: from n/a through <= 7.3.2.
Published: 2025-11-13T09:24:34.585Z
Updated: 2026-04-28T18:32:35.729Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64379 vulnerable 2026-06-08 07:39:18.444860 WordPress Booster for WooCommerce plugin <= 7.4.0 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booster for WooCommerce: from n/a through <= 7.4.0.
Published: 2025-11-13T09:24:34.101Z
Updated: 2026-04-28T18:32:26.874Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64196 vulnerable 2026-06-08 07:39:18.208677 WordPress Booster for WooCommerce plugin <= 7.2.5 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Reflected XSS.This issue affects Booster for WooCommerce: from n/a through <= 7.2.5.
Published: 2025-11-06T15:56:07.302Z
Updated: 2026-04-28T18:23:29.747Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39446 vulnerable 2026-06-08 07:23:06.577648 WordPress Booster Plus for WooCommerce plugin <= 7.2.4 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl LLC Booster Plus for WooCommerce allows Reflected XSS.This issue affects Booster Plus for WooCommerce: from n/a through 7.2.4.
Published: 2025-05-19T18:55:54.932Z
Updated: 2026-04-28T16:12:31.832Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9239 vulnerable 2026-06-08 07:00:26.990132 Booster for WooCommerce <= 7.2.3 - Reflected Cross-Site Scripting
MEDIUM (6.1)
The Booster for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 7.2.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Published: 2024-11-20T06:42:55.546Z
Updated: 2026-04-08T17:20:38.720Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9170 vulnerable 2026-06-08 07:00:26.841122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3957 vulnerable 2026-06-08 06:43:51.970754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29760 vulnerable 2026-06-08 06:33:29.300575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1534 vulnerable 2026-06-08 06:27:13.291012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1054 vulnerable 2026-06-08 06:25:39.088218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13744 vulnerable 2026-06-08 06:25:38.453012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13708 vulnerable 2026-06-08 06:25:38.254692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13342 vulnerable 2026-06-08 06:25:37.335547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12278 vulnerable 2026-06-08 06:23:51.594599 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5638 vulnerable 2026-06-08 06:19:44.333763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4945 vulnerable 2026-06-08 06:16:15.144960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4796 vulnerable 2026-06-08 06:16:14.571172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48747 vulnerable 2026-06-08 06:14:27.988009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48333 vulnerable 2026-06-08 06:14:26.906577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40002 vulnerable 2026-06-08 06:09:41.001415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4227 vulnerable 2026-06-08 05:51:37.008865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4017 vulnerable 2026-06-08 05:51:36.542109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4016 vulnerable 2026-06-08 05:51:36.539577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41805 vulnerable 2026-06-08 05:48:31.239140 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3763 vulnerable 2026-06-08 05:48:22.302522 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3762 vulnerable 2026-06-08 05:48:22.301721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34646 vulnerable 2026-06-08 05:32:14.351513 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25001 vulnerable 2026-06-08 05:30:39.774234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25000 vulnerable 2026-06-08 05:30:39.773683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24999 vulnerable 2026-06-08 05:30:39.772929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20966 vulnerable 2026-06-08 05:11:28.250392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.