WordPress plugin

Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools security & vulnerabilities

Q: Does Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools have known vulnerabilities?

Yes. VulnCrest Radar lists 39 known vulnerabilities in Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools: 1 critical, 11 high, 27 medium. None are known to affect version null.

Q: How do I check which version of Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools vulnerability?

CVE-2026-42718, published Oct 8, 2026: Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools <= 8.4.0 - Unauthenticated PHP Object Injection. Severity: High (CVSS 8.1).

Q: Is any Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools vulnerability listed in CISA KEV?

No. None of the known Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools vulnerabilities is currently listed in the CISA KEV catalog.

woocommerce-jetpack— active installsLast vulnerability Oct 8, 2026

No known unpatched vulnerabilities in the latest version

All 39 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

39Known vulnerabilities

Critical1
High11
Medium27
Low0

Vulnerabilities per year

All Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools vulnerabilities

Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools vulnerabilities
Severity	Vulnerability	CVE	Published
High8.1	Unauthenticated PHP Object Injection ≤8.4.0Update to 8.5.0	CVE-2026-42718	Oct 08
High8.8	Authenticated (Customer+) Arbitrary File Upload ≤8.0.1Update to 8.0.2	CVE-2026-56027	Jun 23
Medium5.3	Missing Authorization <7.11.3Update to 7.11.3	CVE-2026-32586	Mar 17
Medium4.3	Missing Authorization ≤7.4.0Update to 7.5.0	CVE-2025-64379	Oct 30, 2025
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤7.3.2Update to 7.4.0	CVE-2025-64380	Oct 18, 2025
High8.1	Unauthenticated Double Extension Arbitrary File Upload ≤7.2.4Update to 7.2.5	CVE-2024-13342	Aug 28, 2025
Medium6.1	Reflected Cross-Site Scripting ≤7.2.5Update to 7.2.6	CVE-2025-64196	Apr 22, 2025
High7.2	7.2.4 - Unauthenticated Stored Cross-Site Scripting 4.0.1 – 7.2.4Update to 7.2.5	CVE-2024-13708	Apr 3, 2025
High8.1	7.2.4 - Unauthenticated Arbitrary File Upload 4.0.1 – 7.2.4Update to 7.2.5	CVE-2024-13744	Apr 3, 2025
High7.2	Unauthenticated Stored Cross-Site Scripting ≤7.2.4Update to 7.2.5	CVE-2024-12278	Mar 31, 2025
Medium5.5	Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta Shortcode ≤7.2.3Update to 7.2.4	CVE-2024-9170	Nov 25, 2024
Medium6.1	Reflected Cross-Site Scripting ≤7.2.3Update to 7.2.4	CVE-2024-9239	Nov 19, 2024
Medium6.5	Unauthenticated Arbitrary Shortcode Execution ≤7.1.8Update to 7.1.9	CVE-2024-3957	May 1, 2024
Medium6.1	Reflected Cross-Site Scripting ≤7.1.7Update to 7.1.8	CVE-2024-29760	Mar 25, 2024
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde ≤7.1.7Update to 7.1.8	CVE-2024-1534	Mar 6, 2024
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤7.1.6Update to 7.1.7	CVE-2024-1054	Feb 12, 2024
Medium4.3	Missing Authorization to Authenticated (Subscriber+) Order Information Disclosure ≤7.1.1Update to 7.1.2	CVE-2023-48333	Nov 24, 2023
Medium4.3	Missing Authorization to Product Creation/Modification ≤7.1.2Update to 7.1.3	CVE-2023-48747	Nov 24, 2023
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ≤7.1.2Update to 7.1.3	CVE-2023-5638	Oct 18, 2023
Medium4.3	Authenticated (Subscriber+) Information Disclosure via Shortcode ≤7.1.1Update to 7.1.2	CVE-2023-40002	Oct 4, 2023
Medium4.3	Authenticated (Subscriber+) Information Disclosure via Shortcode ≤7.1.0Update to 7.1.1	CVE-2023-4796	Sep 13, 2023
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ≤7.1.0Update to 7.1.1	CVE-2023-4945	Sep 13, 2023
High7.2	Authenticated (Shop Manager+) Missing Authorization to Arbitrary Options Update 7.0.0 – 7.0.0Update to 7.1.0	—	Aug 1, 2023
Medium5.4	Cross-Site Request Forgery ≤6.0.0Update to 6.0.1	CVE-2022-4017	Jan 2, 2023
Medium6.1	Reflected Cross-Site Scripting ≤5.6.2Update to 5.6.3	CVE-2022-4227	Dec 5, 2022
High8.8	Cross-Site Request Forgery ≤5.6.8Update to 6.0.0	—	Nov 30, 2022
Medium5.4	Cross-Site Request Forgery leading to Arbitrary Custom Role Creation/Deletion ≤5.6.6Update to 5.6.7	CVE-2022-4016	Nov 21, 2022
High8.8	Cross-Site Request Forgery to File Deletion ≤5.6.6Update to 5.6.7	—	Oct 31, 2022
High8.8	Cross-Site Request Forgery ≤5.6.6Update to 5.6.7	CVE-2022-41805	Oct 27, 2022
Medium6.5	Authenticated (Shop Manager+) Information Exposure via Arbitrary File Download ≤5.6.6Update to 5.6.7	—	Oct 27, 2022
Medium6.5	Authenticated (Subscriber+) Order Modification ≤5.6.2Update to 5.6.3	—	Sep 19, 2022
High8.8	Cross-Site Request Forgery ≤5.6.1Update to 5.6.2	—	Jul 27, 2022
Medium6.1	Reflected Cross-Site Scripting ≤5.5.9Update to 5.6.0	—	Jul 4, 2022
Medium6.1	Reflected Cross-Site Scripting ≤5.5.8Update to 5.5.9	—	May 31, 2022
Medium6.1	Reflected Cross-Site Scripting in Product XML Feeds Module <5.4.9Update to 5.4.9	CVE-2021-25001	Dec 1, 2021
Medium6.1	Reflected Cross-Site Scripting in General Module <5.4.9Update to 5.4.9	CVE-2021-25000	Dec 1, 2021
Medium6.1	Reflected Cross-Site Scripting in PDF Invoicing Module <5.4.9Update to 5.4.9	CVE-2021-24999	Dec 1, 2021
Critical9.8	Authentication Bypass ≤5.4.3Update to 5.4.4	CVE-2021-34646	Aug 24, 2021
Medium6.1	Cross-Site Scripting <3.8.0Update to 3.8.0	CVE-2018-20966	Jul 28, 2018

Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools: common questions

Does Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools have known vulnerabilities?

Yes. VulnCrest Radar lists 39 known vulnerabilities in Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools: 1 critical, 11 high, 27 medium. None are known to affect version null.

How do I check which version of Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools vulnerability?

CVE-2026-42718, published Oct 8, 2026: Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools <= 8.4.0 - Unauthenticated PHP Object Injection. Severity: High (CVSS 8.1).

Is any Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools vulnerability listed in CISA KEV?

No. None of the known Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools vulnerabilities is currently listed in the CISA KEV catalog.