Input validation vulnerability in Button 1.1.28

The Button plugin used in WordPress has a security issue where it can be attacked by injecting a harmful code through untrusted input. This can only be done by someone with contributor-level access or higher. If there is another plugin or theme installed on the website, it could make the attack more severe by allowing the attacker to delete files, access sensitive information, or run code.