Pluggabl LLC. vulnerabilities
11 vulnerabilities
Known vulnerabilities in Pluggabl LLC. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.
Products
5- Booster For Woocommerce4 vulnerabilities
- Booster Plus For Woocommerce3 vulnerabilities
- Booster Elite For Woocommerce2 vulnerabilities
- Booster For Woocommcerce1 vulnerabilities
- Booster For Woocommerce (Wordpress Plugin)1 vulnerabilities
CVE-2023-25996pluggabl llc.booster elite for woocommerce+1
EPSS score0.27%
Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce booster-elite-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Booster Elite for WooCommerce: from n/a before 8.4.0.CVE-2021-34646boosterbooster_for_woocommerce+2EPSS score50.87%
Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the process_email_verification function due to a random token generation weakness in the reset_and_mail_activation_link function found in the ~/includes/class-wcj-emails-verification.php file. This allows attackers to impersonate users and trigger an email address verification for arbitrary accounts, including administrative accounts, and automatically be logged in as that user, including any site administrators. This requires the Email Verification module to be active in the plugin and the Login User After Successful Verification setting to be enabled, which it is by default.CVE-2025-39446boosterbooster_for_woocommerce+2EPSS score0.24%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl LLC Booster Plus for WooCommerce allows Reflected XSS.This issue affects Booster Plus for WooCommerce: from n/a through 7.2.4.CVE-2022-41805boosterbooster_for_woocommerce+2EPSS score0.25%
Cross-Site Request Forgery (CSRF) vulnerability in Booster for WooCommerce plugin <= 5.6.6 on WordPress.CVE-2024-29760boosterbooster_for_woocommerce+2EPSS score0.42%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl LLC Booster for WooCommerce allows Reflected XSS.This issue affects Booster for WooCommerce: from n/a through 7.1.7.CVE-2023-40002boosterbooster_for_woocommerce+2EPSS score0.61%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pluggabl LLC Booster for WooCommerce plugin <= 7.1.1 versions.CVE-2023-52230boosterbooster_for_woocommerce+2EPSS score0.35%
Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.3.CVE-2023-52232boosterbooster_for_woocommerce+2EPSS score0.34%
Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerce: from n/a before 7.1.2.CVE-2023-51511boosterbooster_for_woocommerce+2EPSS score0.37%
Improper Authentication vulnerability in Pluggabl LLC Booster Elite for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booster Elite for WooCommerce: from n/a before 7.1.3.CVE-2023-48333boosterbooster_for_woocommerce+2EPSS score0.59%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pluggabl LLC Booster for WooCommerce.This issue affects Booster for WooCommerce: from n/a through 7.1.1.CVE-2023-48747boosterbooster_for_woocommerce+2EPSS score0.40%
Improper Authentication vulnerability in Pluggabl LLC Booster for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booster for WooCommerce: from n/a through 7.1.2.