The Exclusive Addons for Elementor plugin for WordPress has a security issue that allows unauthorized users to inject harmful code into web pages. This can happen because the plugin does not properly clean up user input and does not prevent the execution of this code. This means that anyone with contributor access or higher can potentially add harmful scripts to web pages that will run whenever someone visits that page.