Input validation vulnerability in oik 4.10.3

The oik plugin for WordPress has a security issue that allows hackers to insert harmful code into web pages using the plugin’s bw_button feature. This can happen in any version up to 4.10.3. The problem is caused by the plugin not properly checking the information that users provide and not properly protecting the output. This means that someone with contributor-level access or higher can add code that will run when someone visits the affected web page.