booster booster for woocommerce

Name: booster booster for woocommerce
Brand: booster

productUS

cpe:2.3:a:booster:booster_for_woocommerce:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical4high24medium0low

updated 2026-10-28

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-34646US	critical9.8OT high	50.9% (99th)	Exploit	no fix	2021-08-30	≤ 5.4.3
CVE-2018-20966US	medium6.1	1.83% (79th)	Exploit	3.8.0	2019-08-12	< 3.8.0
CVE-2024-1986US	—	1.28% (70th)	—	7.1.8	2024-03-07	< 7.1.8
CVE-2022-3762US	medium6.5	1.02% (63rd)	—	5.6.5	2022-11-21	3 versions
CVE-2024-3957US	high7.3OT elevated	0.88% (59th)	—	7.1.9	2024-05-02	< 7.1.9
CVE-2021-25001US	medium6.1	0.78% (56th)	—	5.4.9	2022-01-03	< 5.4.9
CVE-2021-25000US	medium6.1	0.78% (56th)	—	5.4.9	2022-01-03	< 5.4.9
CVE-2021-24999US	medium6.1	0.78% (56th)	—	5.4.9	2022-01-03	< 5.4.9
CVE-2023-4796US	medium4.3	0.75% (55th)	—	7.1.1	2023-10-20	< 7.1.1
CVE-2024-13342US	critical9.8	0.73% (54th)	—	7.2.5	2025-08-29	< 7.2.5
CVE-2024-13744US	critical9.8	0.70% (53rd)	—	7.2.5	2025-04-04	4.0.1 → 7.2.5
CVE-2023-40002US	medium6.5	0.61% (49th)	—	no fix	2023-11-23	≤ 7.1.1
CVE-2023-48333US	medium6.5	0.59% (48th)	—	no fix	2023-11-30	≤ 7.1.1
CVE-2023-4945US	medium5.4	0.57% (47th)	—	no fix	2023-09-14	≤ 7.1.0
CVE-2023-5638US	medium5.4	0.56% (46th)	—	no fix	2023-10-19	≤ 7.1.2
CVE-2023-52234US	medium6.5	0.53% (45th)	—	7.1.2	2024-03-28	< 7.1.2
CVE-2023-52231US	medium6.5	0.53% (45th)	—	7.1.2	2024-03-28	< 7.1.2
CVE-2024-9170US	medium4.8	0.44% (38th)	—	7.2.4	2024-11-26	< 7.2.4
CVE-2022-4227US	medium6.1	0.43% (38th)	—	5.6.3	2022-12-26	< 5.6.3
CVE-2024-29760US	medium6.1	0.42% (36th)	—	7.1.8	2024-03-27	< 7.1.8
CVE-2024-9239US	—	0.41% (35th)	—	7.2.4	2024-11-20	< 7.2.4
CVE-2023-48747US	high8.8	0.40% (35th)	—	7.1.3	2024-06-04	< 7.1.3
CVE-2022-3763US	high8.1	0.40% (34th)	—	5.6.7	2022-11-21	3 versions
CVE-2023-51511US	medium6.5	0.37% (31st)	—	7.1.3	2024-06-04	< 7.1.3
CVE-2022-4016US	medium6.5	0.36% (29th)	—	5.6.6	2022-12-12	3 versions
CVE-2023-52230US	medium6.5OT elevated	0.35% (29th)	—	no fix	2024-06-09	≤ 7.1.3
CVE-2024-1054US	medium5.4	0.34% (27th)	—	7.1.7	2024-02-29	< 7.1.7
CVE-2022-4017US	high8.8	0.34% (27th)	—	6.0.1	2023-01-23	< 6.0.1
CVE-2023-52232US	medium6.5OT elevated	0.34% (27th)	—	7.1.2	2024-06-09	< 7.1.2
CVE-2024-12278US	medium6.1	0.34% (27th)	—	7.2.5	2025-04-01	< 7.2.5
CVE-2024-1534US	medium5.4	0.32% (25th)	—	7.1.8	2024-03-07	< 7.1.8
CVE-2024-13708US	—	0.29% (21st)	—	7.2.5	2025-04-04	4.0.1 → 7.2.5
CVE-2022-41805US	medium4.3	0.26% (17th)	—	5.6.7	2022-11-18	< 5.6.7
CVE-2025-39446US	medium6.1	0.24% (15th)	—	no fix	2025-05-19	≤ 7.2.4
CVE-2025-64379US	—OT elevated	0.20% (10th)	—	7.5.0	2025-11-13	< 7.5.0
CVE-2025-64196US	—	0.19% (9th)	—	7.2.6	2025-11-06	< 7.2.6
CVE-2025-64380US	—	0.17% (6th)	—	7.4.0	2025-11-13	< 7.4.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')16 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-352Cross-Site Request Forgery (CSRF)4 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type4 CVEs
CWE-862Missing Authorization3 CVEs
CWE-287Improper Authentication2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-290Authentication Bypass by Spoofing1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan