Input validation vulnerability in Delicate 3.5.5

The Delicate WordPress theme has a security issue that allows attackers to insert their own harmful code into pages. This can be done through the ‘link’ parameter in the theme’s Button feature. The problem exists in all versions of the theme up to and including version 3.5.5 because the theme does not properly protect against harmful code. This means that attackers with a certain level of access can add their own code to a page, which will then execute when a user visits that page.