Plugin icon

Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools

woocommerce-jetpack

Vulnerabilities:

33

Last Updated:

February 27, 2026

Active Installs:

30000

Published
Title
Fixed in
CVSS
Published
2025-10-30
Title
Booster for WooCommerce < 7.5.0 - Missing Authorization
Fixed in
Fixed in 7.5.0
CVSS
4.3 (medium)
Published
2025-10-18
Title
Booster for WooCommerce < 7.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 7.4.0
CVSS
6.4 (medium)
Published
2025-08-28
Title
Booster for WooCommerce < 7.2.5 - Unauthenticated Double Extension Arbitrary File Upload
Fixed in
Fixed in 7.2.5
CVSS
8.1 (high)
Published
2025-04-22
Title
Booster for WooCommerce < 7.2.6 - Reflected Cross-Site Scripting
Fixed in
Fixed in 7.2.6
CVSS
6.1 (medium)
Published
2025-04-03
Title
Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 7.2.5
CVSS
7.2 (high)
Published
2025-04-03
Title
Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 7.2.5
CVSS
8.1 (high)
Published
2025-03-31
Title
Booster for WooCommerce < 7.2.5 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 7.2.5
CVSS
7.2 (high)
Published
2024-11-25
Title
Booster for WooCommerce < 7.2.4 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta Shortcode
Fixed in
Fixed in 7.2.4
CVSS
5.5 (medium)
Published
2024-11-19
Title
Booster for WooCommerce < 7.2.4 - Reflected Cross-Site Scripting
Fixed in
Fixed in 7.2.4
CVSS
6.1 (medium)
Published
2024-05-01
Title
Booster for WooCommerce < 7.1.9 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 7.1.9
CVSS
6.5 (medium)
Published
2024-03-25
Title
Booster for WooCommerce < 7.1.8 - Reflected Cross-Site Scripting
Fixed in
Fixed in 7.1.8
CVSS
6.1 (medium)
Published
2024-03-06
Title
Booster for WooCommerce < 7.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde
Fixed in
Fixed in 7.1.8
CVSS
6.4 (medium)
Published
2024-02-12
Title
Booster for WooCommerce < 7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 7.1.7
CVSS
6.4 (medium)
Published
2023-11-24
Title
Booster for WooCommerce < 7.1.3 - Missing Authorization to Product Creation/Modification
Fixed in
Fixed in 7.1.3
CVSS
4.3 (medium)
Published
2023-11-24
Title
Booster for WooCommerce < 7.1.2 - Missing Authorization to Authenticated (Subscriber+) Order Information Disclosure
Fixed in
Fixed in 7.1.2
CVSS
4.3 (medium)
Published
2023-10-18
Title
Booster for WooCommerce < 7.1.3 - Contributor+ Stored XSS
Fixed in
Fixed in 7.1.3
CVSS
6.4 (medium)
Published
2023-10-04
Title
Booster for WooCommerce < 7.1.2 - Authenticated (Subscriber+) Information Disclosure via Shortcode
Fixed in
Fixed in 7.1.2
CVSS
4.3 (medium)
Published
2023-09-13
Title
Booster for WooCommerce < 7.1.1 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 7.1.1
CVSS
6.8 (medium)
Published
2023-09-13
Title
Booster for WooCommerce < 7.1.1 - Subscriber+ Sensitive Information Disclosure
Fixed in
Fixed in 7.1.1
CVSS
4.3 (medium)
Published
2023-08-01
Title
Booster for WooCommerce < 7.1.0 - Shop Manager+ Missing Authorization to Arbitrary Options Update
Fixed in
Fixed in 7.1.0
CVSS
4.7 (medium)
Published
2023-01-02
Title
Booster for WooCommerce - Multiple CSRF
Fixed in
Fixed in 6.0.1
CVSS
5.4 (medium)
Published
2022-12-05
Title
Booster for WooCommerce - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.6.3
CVSS
7.5 (high)
Published
2022-11-21
Title
Booster for WooCommerce - Custom Role Creation/Deletion via CSRF
Fixed in
Fixed in 5.6.7
CVSS
6.1 (medium)
Published
2022-10-31
Title
Booster for WooCommerce - Checkout Files Deletion via CSRF
Fixed in
Fixed in 5.6.7
CVSS
3.1 (low)
Published
2022-10-31
Title
Booster for WooCommerce - ShopManager+ Arbitrary File Download
Fixed in
Fixed in 5.6.7
CVSS
5.8 (medium)
Published
2022-10-28
Title
Booster for WooCommerce < 5.6.7 - Settings Reset via CSRF
Fixed in
Fixed in 5.6.7
CVSS
5.4 (medium)
Published
2022-09-19
Title
Booster for WooCommerce - Subscriber+ Order Status Update
Fixed in
Fixed in 5.6.3
CVSS
4.2 (medium)
Published
2022-07-04
Title
Booster for WooCommerce < 5.6.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.6.2
CVSS
6.1 (medium)
Published
2021-12-01
Title
Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in Product XML Feeds Module
Fixed in
Fixed in 5.4.9
CVSS
8.8 (high)
Published
2021-12-01
Title
Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in General Module
Fixed in
Fixed in 5.4.9
CVSS
8.8 (high)
Published
2021-12-01
Title
Booster for Woocommerce < 5.4.9 - Reflected Cross-Site Scripting in PDF Invoicing Module
Fixed in
Fixed in 5.4.9
CVSS
8.8 (high)
Published
2021-08-24
Title
Booster for WooCommerce < 5.4.4 - Authentication Bypass
Fixed in
Fixed in 5.4.4
CVSS
9.8 (critical)
Published
2018-07-28
Title
Woocommerce Jetpack < 3.8.0 - XSS
Fixed in
Fixed in 3.8.0
CVSS
6.1 (medium)