Input validation vulnerability in ConvertPlug 3.5.25

The ConvertPlug plugin for WordPress has a security issue that allows attackers to inject harmful code through a feature called ‘smile_info_bar’. This can only be done by someone who has access to the website as a contributor or higher. If the website has other plugins or themes that also have security issues, the attacker may be able to delete files, access private information, or run their own code.