The plugin called “Fuse Social Floating Sidebar” for WordPress has a security issue that can allow hackers to upload harmful files. This can happen in all versions of the plugin up to 5.4.10 because the plugin does not check the files properly. This means that attackers who have contributor-level access or higher can add their own code to a page and it will run whenever someone views that page.