Booster vulnerabilities
We track 3 vulnerabilities in Booster products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 29, 2025.
Latest Booster vulnerabilities
- 9.8 Critical severity
Booster for WooCommerce – PDF Invoices…: Unrestricted Upload of File with Dangerous Type
The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'add_files_to_order' function in all versions up to, and including, 7.2.4. This makes it possible for unauthenticated attackers
- 7.3 High severity
Booster for WooCommerce – PDF Invoices…: Incorrect Authorization
The Booster for WooCommerce plugin is vulnerable to Unauthenticated Arbitrary Shortcode Execution in versions up to, and including, 7.1.8. This allows unauthenticated attackers to execute arbitrary shortcodes. The severity and exploitability depends on what ot
- 8.8 High severity
Booster Elite for WooCommerce: Unrestricted Upload of File with Dangerous Type
The Booster Elite for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wc_add_new_product() function in all versions up to, and including, 7.1.7. This makes it possible for customer-level attac