The Ultimate Blocks plugin for WordPress is at risk of a security issue called Stored Cross-Site Scripting. This is because the plugin does not properly clean up or protect information entered by users. This could allow someone with contributor-level access or higher to add harmful code to pages, which would run whenever someone visits the page.