Known vulnerabilities in Booster for WooCommerce

Software CPE: cpe:2.3:a:algoritmika:woocommerce-jetpack:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Booster for WooCommerce Booster for WooCommerce is affected by 7 known vulnerabilities: 1 high, 3 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100932 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-9239
CWE-79 Low
No
No
7.2.4 26.11.2024 SB2024112645
#VU100931 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-9170
CWE-79 Low
No
No
7.2.4 26.11.2024 SB2024112645
#VU70128 - Cross-Site Request Forgery (CSRF)
CVE-2022-41805
CWE-352 Medium
No
No
5.6.7 12.12.2022 SB2022121323
#VU70059 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-3762
CWE-22 Medium
No
No
5.6.7 08.12.2022 SB2022121307
SB2022121309
#VU70052 - Cross-Site Request Forgery (CSRF)
CVE-2022-3763
CWE-352 Medium
No
No
5.6.7 08.12.2022 SB2022121306
SB2022121310
#VU56299 - Improper Authentication
CVE-2021-34646
CWE-287 High
Available
No
5.4.4 03.09.2021 SB2021090311
#VU20547 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20966
CWE-79 Low
No
No
3.8.0 02.09.2019 SB2018072802