WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Booster for WooCommerce plugin versions prior to 1.1.7, 5.6.5, and 5.6.7 contain a path traversal vulnerability that stems from the fact that the Booster Elite plugin does not validate file downloads for certain modules. An attacker could exploit the vulnerability to download arbitrary files from the server.