Input validation vulnerability in WP Popups – WordPress Popup builder 2.1.5

The WP Popups plugin for WordPress websites is vulnerable to a security risk called Stored Cross-Site Scripting. This risk can be exploited by people with access to the website who have at least ‘contributor’ level permissions. It allows them to add malicious code to pages which will be executed whenever someone visits the page. This vulnerability exists in versions up to and including 2.5.1 of the plugin.