WordPress plugin
Boom Fest security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium1
- Low0
All Boom Fest vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
Boom Fest: common questions
Does Boom Fest have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Boom Fest: 1 medium. None are known to affect version null.
How do I check which version of Boom Fest I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Boom Fest vulnerability?
CVE-2024-13449, published Jan 24, 2025: Boom Fest <= 2.2.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update. Severity: Medium (CVSS 4.3).
Is any Boom Fest vulnerability listed in CISA KEV?
No. None of the known Boom Fest vulnerabilities is currently listed in the CISA KEV catalog.