The Google Maps plugin for WordPress, called Simple Shortcode, has a security issue that can affect all versions up to 1.5.4. This is because the plugin does not properly clean up and filter user input, which can allow attackers with contributor-level access or higher to insert harmful website code into pages. This code will then run whenever a user visits the page.