The Booster for WooCommerce plugin for WordPress has a security vulnerability in versions up to 5.6.6 (Free) and 5.6.4 (Premium). This flaw allows unauthenticated attackers to delete files uploaded during checkout without needing to be authenticated. This can be done by getting a Shop Manager to click on a malicious link. To protect against this, the plugin should be updated to ensure that nonce validation is performed when deleting files.