Input validation vulnerability in Product Category Tree 2.5

The Product Category Tree plugin for WordPress is not secure in versions up to 2.5. This means that an attacker can inject malicious code into pages which would be executed when anyone visits those pages. This is a serious threat as it can be used to steal login information and other private data. It is important to update the plugin to the latest version in order to prevent this attack.