The Nexter Blocks plugin for WordPress has a security issue that allows hackers to inject harmful code into web pages. This can happen when users with certain levels of access add widgets to their pages. This vulnerability affects all versions up to and including 4.5.4.