Vulnerabilidades do Pluggabl Booster for WooCommerce

CVE-2026-42718 Crítica · 9.8 CWE-502 10/10/2026

Plugin Booster for WooCommerce para WordPress - Injeção de Objeto PHP

Injeção de objeto PHP não autenticada no Booster for WooCommerce, nas versões <= 8.4.0.

CVE-2026-56027 Crítica · 9.9 CWE-434 26/06/2026

Upload arbitrário de arquivos por clientes no Booster for WooCommerce (CVE-2026-56027)

Upload arbitrário de arquivo por clientes no Booster for WooCommerce <= 8.0.1 versões.

CVE-2026-32586 Média · 5.3 CWE-862 17/03/2026

WordPress Booster for WooCommerce plugin < 7.11.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booster for WooCommerce: from n/a through < 7.11.3.

CVE-2025-64380 Média · 6.5 CWE-79 13/11/2025

WordPress Booster for WooCommerce plugin <= 7.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Stored XSS.This issue affects Booster for WooCommerce: from n/a through <= 7.3.2.

CVE-2025-64379 Média · 4.3 CWE-862 13/11/2025

WordPress Booster for WooCommerce plugin <= 7.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booster for WooCommerce: from n/a through <= 7.4.0.

CVE-2025-64196 Alta · 7.1 CWE-79 06/11/2025

WordPress Booster for WooCommerce plugin <= 7.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Reflected XSS.This issue affects Booster for WooCommerce: from n/a through <= 7.2.5.