Input validation vulnerability in Display custom fields in the frontend – Post and User Profile Fields 1.2.1

The plugin called “Display custom fields in the frontend – Post and User Profile Fields” for WordPress has a security issue. This is because it does not check the data properly and does not limit who can use a specific code called “vg_display_data”. This means that someone who is logged into the website and has contributor-level or higher permissions can use this code to do things and run code without permission.