The EWWW Image Optimizer plugin for WordPress had a security vulnerability that let malicious people inject malicious code onto websites. This vulnerability was present before version 2.0.2 and allowed attackers to inject code into a website via the error parameter in a page called ewww-image-optimizer.php