WordPress booster-for-woocommerce has 9 known advisories in the phpwarden feed. Feed 2026.10.29.4, updated 2026-10-29.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2022-3762 | The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for Woo | medium | 6.5 | <1.1.7 or <5.6.5 or <5.6.7 | 5.6.7 |
| CVE-2021-24999 | The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_notice parameter before outputting it back in | medium | 6.1 | <5.4.9 | 5.4.9 |
| CVE-2021-25000 | The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_delete_role parameter before outputting back | medium | 6.1 | <5.4.9 | 5.4.9 |
| CVE-2021-25001 | The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_create_products_xml_result parameter before o | medium | 6.1 | <5.4.9 | 5.4.9 |
| CVE-2022-4227 | The Booster for WooCommerce WordPress plugin before 5.6.3, Booster Plus for WooCommerce WordPress plugin before 6.0.0, Booster Elite for Woo | medium | 6.1 | <5.6.3 | 5.6.3 |
| CVE-2022-3763 | The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for Woo | high | 8.1 | <1.1.7 or <5.6.5 or <5.6.7 | 5.6.7 |
| CVE-2022-4016 | The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.6, Booster Elite for Woo | medium | 6.5 | <1.1.8 or <5.6.6 or <5.6.7 | 5.6.7 |
| CVE-2022-4017 | The Booster for WooCommerce WordPress plugin before 6.0.1, Booster Plus for WooCommerce WordPress plugin before 6.0.1, Booster Elite for Woo | high | 8.8 | <6.0.1 | 6.0.1 |
| CVE-2022-41805 | Cross-Site Request Forgery (CSRF) vulnerability in Booster for WooCommerce plugin <= 5.6.6 on WordPress. | medium | 5.4 | <5.6.7 | 5.6.7 |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# PHP projects (recommended) composer require --dev phpwarden/phpwarden # then vendor/bin/phpwarden wordpress /var/www/html # or, without Composer pipx install phpwarden && phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked