WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
booster-elite-for-woocommerce
Published
2022-12-05
Title
Booster for WooCommerce - Reflected Cross-Site Scripting
Slug
booster-elite-for-woocommerce
Published
2023-01-02
Title
Booster for WooCommerce - Multiple CSRF
Slug
booster-elite-for-woocommerce
Published
2023-12-27
Title
Booster Elite for WooCommerce < 7.1.3 - Subscriber+ Content Injection
Slug
booster-elite-for-woocommerce
Published
2024-01-05
Title
Booster Elite for WooCommerce < 7.1.2 - Missing Authorization to Order Information Disclosure
Slug
booster-elite-for-woocommerce
Published
2024-03-07
Title
Elite Booster for WooCommerce < 7.1.8 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
booster-extension
Published
2024-04-29
Title
Booster Extension <= 1.2.0 - Basic Information Exposure via booster_extension_authorbox_shortcode_display
Slug
booster-plus-for-woocommerce
Published
2022-09-19
Title
Booster for WooCommerce - Subscriber+ Order Status Update
Slug
booster-plus-for-woocommerce
Published
2022-10-31
Title
Booster for WooCommerce - ShopManager+ Arbitrary File Download
Slug
booster-plus-for-woocommerce
Published
2022-10-31
Title
Booster for WooCommerce - Checkout Files Deletion via CSRF
Slug
booster-plus-for-woocommerce
Published
2022-12-05
Title
Booster for WooCommerce - Reflected Cross-Site Scripting
Slug
booster-plus-for-woocommerce
Published
2022-11-21
Title
Booster for WooCommerce - Custom Role Creation/Deletion via CSRF
Slug
booster-plus-for-woocommerce
Published
2023-01-02
Title
Booster for WooCommerce - Multiple CSRF
Slug
booster-plus-for-woocommerce
Published
2024-01-05
Title
Booster Plus for WooCommerce < 7.1.2 - Missing Authorization to Order Information Disclosure
Slug
booster-plus-for-woocommerce
Published
2024-01-05
Title
Booster Plus for WooCommerce < 7.1.3 - Missing Authorization to Arbitrary Options Disclosure
Slug
booster-plus-for-woocommerce
Published
2024-01-05
Title
Booster Plus for WooCommerce < 7.1.2 - Missing Authorization to Arbitrary Page/Post Deletion
Slug
booster-plus-for-woocommerce
Published
2025-04-17
Title
Booster Plus for WooCommerce < 7.2.5 - Reflected Cross-Site Scripting
Slug
boostify-header-footer-builder
Published
2024-06-04
Title
Boostify Header Footer Builder for Elementor < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via size Parameter
Slug
boostify-header-footer-builder
Published
2024-06-05
Title
Boostify Header Footer Builder for Elementor < 1.3.6 - Missing Authorization to Page/Post Creation
Slug
boostify-header-footer-builder
Published
2024-11-12
Title
Boostify Header Footer Builder for Elementor < 1.3.7 - Authenticated (Contributor+) Post Disclosure
Slug
boot-modal
Published
2025-01-07
Title
Boot-Modal < 1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
booter-bots-crawlers-manager
Published
2026-01-25
Title
Booter < 1.5.8 - Missing Authorization
Slug
bootstrap-buttons
Published
2024-12-14
Title
Bootstrap Buttons <= 1.2 - Reflected Cross-Site Scripting
Slug
bootstrap-collapse
Published
2025-02-13
Title
Bootstrap collapse <= 1.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
bootstrap-modals
Published
2025-12-31
Title
Bootstrap Modals <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bootstrap-multi-language-responsive-portfolio
Published
2025-11-03
Title
Multi-language Responsive Portfolio WordPress <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting