Input validation vulnerability in WP Backpack 2.1

The WP Backpack plugin for WordPress can be easily hacked through the admin settings. This can happen in any version up to 2.1 because the plugin doesn’t properly protect against harmful code being inserted. This allows attackers who have admin access to insert their own code into pages, which will then run whenever someone views that page. However, this only affects certain types of installations.