CVE-2026-56027criticalCWE-434

CVE-2026-56027: falha crítica em Pluggabl Booster for WooCommerce

WordPress Booster for WooCommerce plugin <= 8.0.1 - Arbitrary File Upload vulnerability

Publicada em

Seguir esta CVE+ Monitorar Booster for WooCommerce

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.9epss 0.5%
Customer Arbitrary File Upload in Booster for WooCommerce <= 8.0.1 versions.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Pluggabl · Booster for WooCommerce
CVEs relacionadas — Pluggabl Booster for WooCommerce

No mesmo produto, das mais perigosas para as menos.

CVE-2026-42718CRITICALWordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2026-32586MEDIUMWordPress Booster for WooCommerce plugin < 7.11.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-64379MEDIUMWordPress Booster for WooCommerce plugin <= 7.4.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-64196HIGHWordPress Booster for WooCommerce plugin <= 7.2.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-64380MEDIUMWordPress Booster for WooCommerce plugin <= 7.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%