Approved changes feed: RSS · Atom

cpe:2.3:a:booster:booster_for_woocommerce:-:*:*:*:*:wordpress:*:*

part: a version: - update: *

VendorBooster (41b4194b-cf95-5787-aea4-bfeca0a44f9c)
ProductBooster For Woocommerce (620b0eaa-7336-5371-afd6-7cf1826be59b)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/woocommerce-jetpack purl2cpe 2026-06-01 10:16:36.368370

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3957 vulnerable 2026-06-08 06:43:51.968457 Booster for WooCommerce <= 7.1.8 - Unauthenticated Arbitrary Shortcode Execution
MEDIUM (6.5)
The Booster for WooCommerce plugin is vulnerable to Unauthenticated Arbitrary Shortcode Execution in versions up to, and including, 7.1.8. This allows unauthenticated attackers to execute arbitrary shortcodes. The severity and exploitability depends on what other plugins are installed and what shortcode functionality they provide.
Published: 2024-05-02T16:51:49.208Z
Updated: 2026-04-08T16:37:07.796Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.