The W4 Post List plugin for WordPress has a security vulnerability that could allow attackers to inject malicious web scripts into pages. This vulnerability affects versions up to and including 2.4.5 and requires victims to click on a link to be impacted. People using newer browsers should not be affected.