The Onclick Show Popup plugin for WordPress is a piece of software that can be installed on WordPress websites. It has a security vulnerability that could allow attackers with administrator-level permissions on the website to inject malicious code into pages. This code would then execute whenever someone visits the page. This vulnerability only affects multi-site installations and installations where certain security settings have been disabled.