CVE-2026-42718

Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.

Credits

John Ryan Albon | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/woocommerce-jetpack/vulnerability/wordpress-booster-for-woocommerce-plugin-8-4-0-php-object-injection-vulnerability?_s_id=cve