Vulnerabilities / ShopBoost
ShopBoost vulnerabilities
Advisories WPSec published for ShopBoost – WooCommerce Toolkit. Other sources may list more. Its attack surface: ShopBoost on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-14 | WPSEC-2026-3148 | ShopBoost <= 1.8.9 - Unauthenticated IP Spoofing to Rate Limit Bypass via Quick Order Submission | Medium 5.3 | 1.9.0 |
| 2026-11-14 | WPSEC-2026-3147 | ShopBoost <= 1.8.9 - Unauthenticated Information Exposure of Unpublished Products via Quick Order Submission | Medium 5.3 | 1.9.0 |
| 2026-11-14 | WPSEC-2026-3146 | ShopBoost <= 1.8.9 - Unauthenticated Missing Authorization to Product Photo Upload When Guest Uploads Are Disabled | Low 3.7 | 1.9.0 |
License: CC BY 4.0