The popular Ultimate Blocks plugin for WordPress has a security issue that allows hackers to inject harmful code into website pages. This can happen on any page that has the plugin installed, and can be done by anyone with access to the website, even if they only have contributor-level access.