The Exclusive Addons Elementor plugin for WordPress has a security issue that allows attackers to inject harmful code on web pages. This can happen when an authenticated attacker with contributor-level access or higher adds a script to a page, which will then run whenever someone visits that page.