The Popup Maker plugin for WordPress, which is used to create popups for boosting sales and conversions, has a security vulnerability. This means that unauthorized users with high-level permissions can inject harmful web scripts into pages. This only affects certain types of WordPress installations.