# cve.now: Pluggabl

The newest entries naming Pluggabl as an affected vendor (up to 200), of 30 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2023-25996](https://cve.now/CVE-2023-25996.md): WordPress Booster Elite for WooCommerce plugin \< 8.4.0 - Authenticated Arbitrary WordPress Option Disclosure vulnerability (CVSS 6.5)
- [CVE-2026-42718](https://cve.now/CVE-2026-42718.md): WordPress Booster for WooCommerce plugin \<= 8.4.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-56027](https://cve.now/CVE-2026-56027.md): WordPress Booster for WooCommerce plugin \<= 8.0.1 - Arbitrary File Upload vulnerability (CVSS 9.9)
- [CVE-2026-32586](https://cve.now/CVE-2026-32586.md): WordPress Booster for WooCommerce plugin \< 7.11.3 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2025-64380](https://cve.now/CVE-2025-64380.md): WordPress Booster for WooCommerce plugin \<= 7.3.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2025-64379](https://cve.now/CVE-2025-64379.md): WordPress Booster for WooCommerce plugin \<= 7.4.0 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2025-64196](https://cve.now/CVE-2025-64196.md): WordPress Booster for WooCommerce plugin \<= 7.2.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-13342](https://cve.now/CVE-2024-13342.md): Booster for WooCommerce \<= 7.2.4 - Unauthenticated Double Extension Arbitrary File Upload (CVSS 8.1)
- [CVE-2025-39446](https://cve.now/CVE-2025-39446.md): WordPress Booster Plus for WooCommerce plugin \<= 7.2.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-13708](https://cve.now/CVE-2024-13708.md): Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2)
- [CVE-2024-13744](https://cve.now/CVE-2024-13744.md): Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload (CVSS 8.1)
- [CVE-2024-12278](https://cve.now/CVE-2024-12278.md): Booster for WooCommerce \<= 7.2.4 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2)
- [CVE-2024-9170](https://cve.now/CVE-2024-9170.md): Booster for WooCommerce \<= 7.2.3 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj\_product\_meta Shortcode (CVSS 5.5)
- [CVE-2024-9239](https://cve.now/CVE-2024-9239.md): Booster for WooCommerce \<= 7.2.3 - Reflected Cross-Site Scripting (CVSS 6.1)
- [CVE-2023-52230](https://cve.now/CVE-2023-52230.md): WordPress Booster Plus for WooCommerce plugin \< 7.1.3 - Authenticated Arbitrary WordPress Option Disclosure Vulnerability (CVSS 6.5)
- [CVE-2023-52232](https://cve.now/CVE-2023-52232.md): WordPress Booster Plus for WooCommerce plugin \< 7.1.2 - Authenticated Arbitrary Post/Page Deletion Vulnerability (CVSS 6.5)
- [CVE-2023-51511](https://cve.now/CVE-2023-51511.md): WordPress Booster Elite for WooCommerce plugin \< 7.1.3 - Authenticated Production Creation/Modification Vulnerability (CVSS 6.5)
- [CVE-2023-48747](https://cve.now/CVE-2023-48747.md): WordPress Booster for WooCommerce plugin \<= 7.1.2 - Authenticated Production Creation/Modification Vulnerability (CVSS 6.5)
- [CVE-2024-3957](https://cve.now/CVE-2024-3957.md): Booster for WooCommerce \<= 7.1.8 - Unauthenticated Arbitrary Shortcode Execution (CVSS 6.5)
- [CVE-2024-29760](https://cve.now/CVE-2024-29760.md): WordPress Booster for WooCommerce plugin \<= 7.1.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-1986](https://cve.now/CVE-2024-1986.md): Elite Booster for WooCommerce \<= 7.1.7 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)
- [CVE-2024-1534](https://cve.now/CVE-2024-1534.md): Booster for WooCommerce \<= 7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde (CVSS 6.4)
- [CVE-2024-1054](https://cve.now/CVE-2024-1054.md): Booster for WooCommerce \<= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2023-48333](https://cve.now/CVE-2023-48333.md): WordPress Booster for WooCommerce Plugin \<= 7.1.1 is vulnerable to Sensitive Data Exposure (CVSS 6.5)
- [CVE-2023-40002](https://cve.now/CVE-2023-40002.md): WordPress Booster for WooCommerce Plugin \<= 7.1.1 is vulnerable to Sensitive Data Exposure (CVSS 6.5)
- [CVE-2023-4796](https://cve.now/CVE-2023-4796.md): Booster for WooCommerce \<= 7.1.0 - Authenticated (Subscriber+) Information Disclosure via Shortcode (CVSS 4.3)
- [CVE-2023-5638](https://cve.now/CVE-2023-5638.md): Booster for WooCommerce \<= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4)
- [CVE-2023-4945](https://cve.now/CVE-2023-4945.md): Booster for WooCommerce \<= 7.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4)
- [CVE-2022-41805](https://cve.now/CVE-2022-41805.md): WordPress Booster for WooCommerce plugin \<= 5.6.6 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
- [CVE-2021-34646](https://cve.now/CVE-2021-34646.md): Booster for WooCommerce \<= 5.4.3 Authentication Bypass (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/pluggabl
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.