The WordPress website software had a bug in an old version of one of its plugins. This bug allowed someone to perform an action called cross-site scripting (XSS) when they were in the website’s administrative menu. This bug was different than a previously known bug on the WordPress website software