Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools vulnerabilities

2 known vulnerabilities in Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools from Pluggabl. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Booster for WooCommerce – PDF Invoices…: Unrestricted Upload of File with Dangerous Type

  CVE-2024-13342Aug 29, 2025Pluggabl

  The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'add_files_to_order' function in all versions up to, and including, 7.2.4. This makes it possible for unauthenticated attackers

• 7.3 High severity

  Booster for WooCommerce – PDF Invoices…: Incorrect Authorization

  CVE-2024-3957May 2, 2024Pluggabl

  The Booster for WooCommerce plugin is vulnerable to Unauthenticated Arbitrary Shortcode Execution in versions up to, and including, 7.1.8. This allows unauthenticated attackers to execute arbitrary shortcodes. The severity and exploitability depends on what ot