The Booster for WooCommerce plugin, used on WordPress websites, has a security vulnerability that allows attackers to insert harmful code using the plugin’s shortcodes. This can happen on any version up to version 7.1.7 because the plugin does not properly clean and protect user input. This means that attackers with certain levels of access can add their own code to a page, which will then run when someone views that page.