CVE Intelligence

Pluggabl vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Pluggabl products: 7 record(s), with severity, exploitation and fixes.

Booster for WooCommerce 6Booster Elite for WooCommerce 1

Exploited only (KEV) →

CVE-2023-25996 Medium · 6.5 CWE-201 Oct 12, 2026
WordPress Booster Elite for WooCommerce plugin < 8.4.0 - Authenticated Arbitrary WordPress Option Disclosure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce booster-elite-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Booster Elite for WooCommerce: from n/a before 8.4.0.
CVE-2026-42718 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.
CVE-2026-56027 Critical · 9.9 CWE-434 Jun 26, 2026
Booster for WooCommerce Arbitrary File Upload via Customer Accounts (CVE-2026-56027)
Customer Arbitrary File Upload in Booster for WooCommerce <= 8.0.1 versions.
CVE-2026-32586 Medium · 5.3 CWE-862 Mar 17, 2026
WordPress Booster for WooCommerce plugin < 7.11.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booster for WooCommerce: from n/a through < 7.11.3.
CVE-2025-64380 Medium · 6.5 CWE-79 Nov 13, 2025
WordPress Booster for WooCommerce plugin <= 7.3.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Stored XSS.This issue affects Booster for WooCommerce: from n/a through <= 7.3.2.
CVE-2025-64379 Medium · 4.3 CWE-862 Nov 13, 2025
WordPress Booster for WooCommerce plugin <= 7.4.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booster for WooCommerce: from n/a through <= 7.4.0.
CVE-2025-64196 High · 7.1 CWE-79 Nov 6, 2025
WordPress Booster for WooCommerce plugin <= 7.2.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Reflected XSS.This issue affects Booster for WooCommerce: from n/a through <= 7.2.5.