The Generate Images – Magic Post Thumbnail plugin used in WordPress has a security issue where attackers with high-level permissions can insert harmful codes into web pages. This can only happen on certain types of websites and if a specific setting is turned off.