A plugin for WordPress called WP Google Street View, which adds 360° virtual tours and Google maps to a website, has a security vulnerability. This means that unauthorized individuals with contributor-level access or higher can insert harmful code into pages that will run when a user visits those pages. The vulnerability is present in all versions up to and including 1.1.3.