Input validation vulnerability in oik 4.10.0

The oik plugin used on WordPress has a security issue that allows malicious code to be added through its shortcodes, specifically the bw_contact_button and bw_button shortcodes. This vulnerability exists in all versions up to 4.10.0 and is caused by not properly filtering and protecting user-provided attributes. This means that users with contributor-level or higher permissions can insert harmful scripts on pages, which will run whenever someone visits that page.