WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
boombox-theme-extensions
Published
2025-02-03
Title
BoomBox Theme Extensions < 1.8.1 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Slug
boombox-theme-extensions
Published
2025-03-18
Title
BoomBox Theme Extensions < 1.8.1 - Subscriber+ Privilege Escalation via Password Reset/Account Takeover in boombox_ajax_reset_password
Slug
booqable-rental-reservations
Published
2023-04-14
Title
Booqable Rental <= 2.4.16 - Admin+ Stored XSS
Slug
booqable-rental-reservations
Published
2025-06-05
Title
Booqable Rental <= 2.4.21 - Cross-Site Request Forgery
Slug
booster-elite-for-woocommerce
Published
2022-10-31
Title
Booster for WooCommerce - Checkout Files Deletion via CSRF
Slug
booster-elite-for-woocommerce
Published
2022-10-31
Title
Booster for WooCommerce - ShopManager+ Arbitrary File Download
Slug
booster-elite-for-woocommerce
Published
2022-09-19
Title
Booster for WooCommerce - Subscriber+ Order Status Update
Slug
booster-elite-for-woocommerce
Published
2022-11-21
Title
Booster for WooCommerce - Custom Role Creation/Deletion via CSRF
Slug
booster-elite-for-woocommerce
Published
2022-12-05
Title
Booster for WooCommerce - Reflected Cross-Site Scripting
Slug
booster-elite-for-woocommerce
Published
2023-01-02
Title
Booster for WooCommerce - Multiple CSRF
Slug
booster-elite-for-woocommerce
Published
2023-12-27
Title
Booster Elite for WooCommerce < 7.1.3 - Subscriber+ Content Injection
Slug
booster-elite-for-woocommerce
Published
2024-01-05
Title
Booster Elite for WooCommerce < 7.1.2 - Missing Authorization to Order Information Disclosure
Slug
booster-elite-for-woocommerce
Published
2024-03-07
Title
Elite Booster for WooCommerce < 7.1.8 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
booster-extension
Published
2024-04-29
Title
Booster Extension <= 1.2.0 - Basic Information Exposure via booster_extension_authorbox_shortcode_display
Slug
booster-plus-for-woocommerce
Published
2022-09-19
Title
Booster for WooCommerce - Subscriber+ Order Status Update
Slug
booster-plus-for-woocommerce
Published
2022-10-31
Title
Booster for WooCommerce - ShopManager+ Arbitrary File Download
Slug
booster-plus-for-woocommerce
Published
2022-10-31
Title
Booster for WooCommerce - Checkout Files Deletion via CSRF
Slug
booster-plus-for-woocommerce
Published
2022-12-05
Title
Booster for WooCommerce - Reflected Cross-Site Scripting
Slug
booster-plus-for-woocommerce
Published
2022-11-21
Title
Booster for WooCommerce - Custom Role Creation/Deletion via CSRF
Slug
booster-plus-for-woocommerce
Published
2023-01-02
Title
Booster for WooCommerce - Multiple CSRF
Slug
booster-plus-for-woocommerce
Published
2024-01-05
Title
Booster Plus for WooCommerce < 7.1.2 - Missing Authorization to Order Information Disclosure
Slug
booster-plus-for-woocommerce
Published
2024-01-05
Title
Booster Plus for WooCommerce < 7.1.3 - Missing Authorization to Arbitrary Options Disclosure
Slug
booster-plus-for-woocommerce
Published
2024-01-05
Title
Booster Plus for WooCommerce < 7.1.2 - Missing Authorization to Arbitrary Page/Post Deletion
Slug
booster-plus-for-woocommerce
Published
2025-04-17
Title
Booster Plus for WooCommerce < 7.2.5 - Reflected Cross-Site Scripting
Slug
boostify-header-footer-builder
Published
2024-06-04
Title
Boostify Header Footer Builder for Elementor < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via size Parameter