This vulnerability (CWE-434) in Booster for WooCommerce allows an authenticated user with low privileges to upload arbitrary files without proper restrictions on file types. This can enable attackers to execute malicious code, leading to full system compromise. The CVSS 3.1 base score is 9.9, indicating critical severity with network attack vector, low attack complexity, no user interaction, and scope change. No official patch or remediation guidance is currently available from the vendor or advisory sources.

Successful exploitation can result in complete compromise of the affected system, including full confidentiality loss, integrity breach, and availability disruption. Attackers can upload and execute malicious files, potentially gaining control over the web server and associated resources.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the plugin and monitor for suspicious file uploads. Consider disabling the plugin if possible to reduce exposure.