Input validation vulnerability in Linear 2.7.12

The Linear plugin for WordPress has a security issue where an attacker can insert harmful code into a website using the plugin’s ‘linear_block_buy_commissions’ feature. This can happen in all versions of the plugin up to version 2.7.12, because the plugin does not properly check and remove harmful code from user-inputted attributes. This means that someone with contributor-level access or higher can add harmful code to a page that will run whenever someone visits that page.