Input validation vulnerability in 4 Smash Balloon plugins

Several plugins for WordPress created by Smash Balloon have a security vulnerability that could allow an attacker to inject malicious code into webpages. If an attacker can convince a user to click on a link or take another action, the malicious code would be executed. This is because the plugins do not properly sanitize user input and escape output, which makes it possible for the attacker to use add_query_arg to insert the malicious code.