Booster Vulnerabilities and Affected Products
Vulnerabilities associated with booster_for_woocommerce.
Products
Clear product- booster_for_woocommerce2 vulnerabilities
- Booster Elite for WooCommerce1 vulnerability
- Booster Plus for WooCommerce1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-13744HIGH | Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File UploadThe Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the validate_product_input_fields_on_add_to_cart function in versions 4.0.1 to 7.2.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. CWE-434Apr 4, 2025 | CVSS8.1v3.1 | EPSS0.64% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-3957MEDIUM | Booster for WooCommerce <= 7.1.8 - Unauthenticated Arbitrary Shortcode ExecutionThe Booster for WooCommerce plugin is vulnerable to Unauthenticated Arbitrary Shortcode Execution in versions up to, and including, 7.1.8. This allows unauthenticated attackers to execute arbitrary shortcodes. The severity and exploitability depends on what other plugins are installed and what shortcode functionality they provide. | CVSS6.5v3.1 | EPSS0.884% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |