The WordPress plugin called “The Ultimate Blocks” has a security issue that allows hackers to inject harmful code into certain pages. This can happen when a user with contributor-level access or higher uses the Advanced Heading Widget feature. The problem is caused by not properly filtering and protecting information provided by users.