
A super popular WordPress plugin was found vulnerable to a cross-site scripting attack which could allow threat actors to steal sensitive information and escalate privileges on websites.
Security researchers Patchstack discovered the flaw and reported it to the developers, before publishing their findings on their blog.