Input validation vulnerability in World of Warcraft – Armory Table 0.2.6

The World of Warcraft – Armory Table plugin for WordPress is vulnerable to a type of attack called Reflected Cross-Site Scripting. This plugin, up to version 0.2.5, does not have enough safeguards in place to protect against this type of attack. If the attacker is able to get a user to click on a link or perform another action, they can inject malicious code into the page, which will then be executed.