The Shortcodes Ultimate WordPress plugin before version 5.10.2 had a vulnerability that allowed people with Contributor roles to put malicious code in certain parts of the plugin. This code could have had damaging effects. The plugin was not consistent in how it protected against this vulnerability