Input validation vulnerability in WP Text Expander 1.0.1

The WP Text Expander plugin for WordPress has a security issue in versions up to and including 1.0.1. This is because the plugin does not properly protect against a type of cyber attack called SQL Injection. As a result, hackers with administrator-level access or higher can add their own malicious code to the plugin’s existing code. This can allow them to access sensitive information from the website’s database.