The Ultimate Blocks – WordPress Blocks Plugin for WordPress has a security issue that could allow hackers to inject harmful code into web pages. This can happen if someone with Contributor-level access or higher uses certain widgets in versions up to 3.3.3.