The Popup Maker plugin for WordPress, which helps increase sales and conversions, has a security issue that allows attackers to inject harmful code through a certain parameter. This can only be done by authenticated attackers with a certain level of access.