The S3 Video plugin for WordPress is not secure in versions up to and including 0.983. This means that people who are not authorized to access the website can inject malicious code into pages on the website. This code can be run if a user clicks on a link that the attacker has set up.