The Booster for WooCommerce plugin, which is used with WordPress, has a security issue. This is due to a lack of proper protection for user input and output in a feature called ‘wcj_product_barcode’. This means that attackers with certain permissions can add harmful code to pages, which will run when someone visits the page.