A popular plugin called WP Shortcodes Plugin – Shortcodes Ultimate for WordPress has a security issue. This allows hackers to insert harmful code into web pages, which will run whenever someone visits the page. The plugin is vulnerable in all versions up to 7.4.0 and affects users with Contributor-level access or higher.