The YARPP plugin for WordPress has a security issue that allows attackers to insert harmful code into the plugin’s settings. This can be done by someone with high-level permissions, and it can affect multi-site installations and sites where certain security measures have been turned off.