The “Ultimate Blocks – WordPress Blocks Plugin” for WordPress is not secure and can be exploited by attackers. This is because it does not properly clean up input and output data. As a result, users with certain permissions can inject harmful scripts into pages that will run whenever someone visits the page.