The WP Shortcodes Plugin – Shortcodes Ultimate plugin for WordPress has a security vulnerability that allows hackers to insert harmful web scripts into pages on a website. This can happen when a user with higher level permissions, such as a contributor, accesses a page that has been injected with the harmful script. This vulnerability exists in all versions of the plugin up to and including 7.0.1.