The eCommerce Product Catalog Plugin for WordPress is a plugin that can be installed on a WordPress website. Unfortunately, up to version 3.3.26 of this plugin, there is a security vulnerability that can allow attackers with certain permissions to inject malicious code into webpages. This code can then be executed when a user visits the page, potentially causing harm.