The WP Mobile Menu plugin for WordPress has a security issue that allows people to change information without permission. This happens because the plugin doesn’t check for the right permissions when using the save_menu_item_icon function. This means that anyone can add a special code to any post, even if they don’t have an account. Please note that version 2.8.4.4 has a partial solution to this problem.