The WordPress plugin called “The Ultimate Blocks – WordPress Blocks Plugin” has a security issue that allows attackers to inject harmful code into web pages using a feature called “tabbed-content-block”. This can be done by users with a certain level of access, and it affects all versions up to 3.1.7.