CVE-2026-42718

Published 10 October 2026 · tracked since 11 October 2026

Description

Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-62050 CRITICAL 9.8
• CVE-2026-62051 CRITICAL 9.8
• CVE-2026-62052 CRITICAL 9.8
• CVE-2026-62053 CRITICAL 9.8
• CVE-2026-62035 MEDIUM 6.3
• CVE-2026-62021 HIGH 8.8
• CVE-2026-42719 CRITICAL 9.8
• CVE-2026-42723 CRITICAL 9.8
• CVE-2026-42716 CRITICAL 9.8
• CVE-2026-108604 MEDIUM 6.3

→ Open the live CVE board · all tools