Input validation vulnerability in WangGuard 1.7.2

The WangGuard plugin for WordPress is vulnerable to a type of attack known as Reflected Cross-Site Scripting in versions before 1.7.2. This means if an unauthenticated attacker can successfully trick a user into clicking on a link, they can inject malicious web scripts into the page that will execute. This is because of an issue with insufficient input sanitization and output escaping on the ‘a’ parameter.