Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools

Information

Software Type Plugin
Software Slug woocommerce-jetpack (view on wordpress.org)
Software Status Active
Software Author pluggabl
Software Website booster.io
Software Downloads 4,290,581
Software Active Installs 30,000
Software Record Last Updated July 15, 2026

Showing 1-20 of 38 Vulnerabilities

Submit a Vulnerability
Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools <= 8.0.1 - Authenticated (Customer+) Arbitrary File Upload
8.8
CVE-2026-56027
Jun 23, 2026
Researcher: Jakub Herman
Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools < 7.11.3 - Missing Authorization
5.3
CVE-2026-32586
Mar 17, 2026
Researcher: Nguyen Ba Khanh
Booster for WooCommerce <= 7.4.0 - Missing Authorization
4.3
CVE-2025-64379
Oct 30, 2025
Researcher: Legion Hunter
Booster for WooCommerce <= 7.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-64380
Oct 18, 2025
Researcher: Muhammad Yudha - DJ
Booster for WooCommerce <= 7.2.4 - Unauthenticated Double Extension Arbitrary File Upload
8.1
CVE-2024-13342
Aug 28, 2025
Researcher: lucky_buddy
Booster for WooCommerce <= 7.2.5 - Reflected Cross-Site Scripting
6.1
CVE-2025-64196
Apr 22, 2025
Researcher: Peter Thaleikis
Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2024-13708
Apr 3, 2025
Researcher: lucky_buddy
Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload
8.1
CVE-2024-13744
Apr 3, 2025
Researcher: lucky_buddy
Booster for WooCommerce <= 7.2.4 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2024-12278
Mar 31, 2025
Researcher: Webbernaut
Booster for WooCommerce <= 7.2.3 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta Shortcode
5.5
CVE-2024-9170
Nov 25, 2024
Researcher: Francesco Carlucci
Booster for WooCommerce <= 7.2.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-9239
Nov 19, 2024
Researcher: vgo0
Booster for WooCommerce <= 7.1.8 - Unauthenticated Arbitrary Shortcode Execution
6.5
CVE-2024-3957
May 1, 2024
Researcher: stealthcopter
Booster for WooCommerce <= 7.1.7 - Reflected Cross-Site Scripting
6.1
CVE-2024-29760
Mar 25, 2024
Researcher: Rafie Muhammad
Booster for WooCommerce <= 7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde
6.4
CVE-2024-1534
Mar 6, 2024
Researcher: Ngô Thiên An (ancorn_)
Booster for WooCommerce <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-1054
Feb 12, 2024
Researcher: Ngô Thiên An (ancorn_)
Booster for WooCommerce <= 7.1.1 - Missing Authorization to Authenticated (Subscriber+) Order Information Disclosure
4.3
CVE-2023-48333
Nov 24, 2023
Researcher: Dave Jong
Booster for WooCommerce <= 7.1.2 - Missing Authorization to Product Creation/Modification
4.3
CVE-2023-48747
Nov 24, 2023
Researcher: Dave Jong
Booster for WooCommerce <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2023-5638
Oct 18, 2023
Researcher: István Márton
Booster for WooCommerce <= 7.1.1 - Authenticated (Subscriber+) Information Disclosure via Shortcode
4.3
CVE-2023-40002
Oct 4, 2023
Researcher: Dave Jong
Booster for WooCommerce <= 7.1.0 - Authenticated (Subscriber+) Information Disclosure via Shortcode
4.3
CVE-2023-4796
Sep 13, 2023
Researcher: István Márton
Title Status CVE ID CVSS Researchers Date
Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools <= 8.0.1 - Authenticated (Customer+) Arbitrary File Upload Patched CVE-2026-56027 8.8 Jakub Herman June 23, 2026
Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools < 7.11.3 - Missing Authorization Patched CVE-2026-32586 5.3 Nguyen Ba Khanh March 17, 2026
Booster for WooCommerce <= 7.4.0 - Missing Authorization Patched CVE-2025-64379 4.3 Legion Hunter October 30, 2025
Booster for WooCommerce <= 7.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-64380 6.4 Muhammad Yudha - DJ October 18, 2025
Booster for WooCommerce <= 7.2.4 - Unauthenticated Double Extension Arbitrary File Upload Patched CVE-2024-13342 8.1 lucky_buddy August 28, 2025
Booster for WooCommerce <= 7.2.5 - Reflected Cross-Site Scripting Patched CVE-2025-64196 6.1 Peter Thaleikis April 22, 2025
Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2024-13708 7.2 lucky_buddy April 3, 2025
Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload Patched CVE-2024-13744 8.1 lucky_buddy April 3, 2025
Booster for WooCommerce <= 7.2.4 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2024-12278 7.2 Webbernaut March 31, 2025
Booster for WooCommerce <= 7.2.3 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta Shortcode Patched CVE-2024-9170 5.5 Francesco Carlucci November 25, 2024
Booster for WooCommerce <= 7.2.3 - Reflected Cross-Site Scripting Patched CVE-2024-9239 6.1 vgo0 November 19, 2024
Booster for WooCommerce <= 7.1.8 - Unauthenticated Arbitrary Shortcode Execution Patched CVE-2024-3957 6.5 stealthcopter May 1, 2024
Booster for WooCommerce <= 7.1.7 - Reflected Cross-Site Scripting Patched CVE-2024-29760 6.1 Rafie Muhammad March 25, 2024
Booster for WooCommerce <= 7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde Patched CVE-2024-1534 6.4 Ngô Thiên An (ancorn_) March 6, 2024
Booster for WooCommerce <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-1054 6.4 Ngô Thiên An (ancorn_) February 12, 2024
Booster for WooCommerce <= 7.1.1 - Missing Authorization to Authenticated (Subscriber+) Order Information Disclosure Patched CVE-2023-48333 4.3 Dave Jong November 24, 2023
Booster for WooCommerce <= 7.1.2 - Missing Authorization to Product Creation/Modification Patched CVE-2023-48747 4.3 Dave Jong November 24, 2023
Booster for WooCommerce <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Patched CVE-2023-5638 6.4 István Márton October 18, 2023
Booster for WooCommerce <= 7.1.1 - Authenticated (Subscriber+) Information Disclosure via Shortcode Patched CVE-2023-40002 4.3 Dave Jong October 4, 2023
Booster for WooCommerce <= 7.1.0 - Authenticated (Subscriber+) Information Disclosure via Shortcode Patched CVE-2023-4796 4.3 István Márton September 13, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation