Input validation vulnerability in Dracula Dark Mode – Enhanced Accessibility, Dark Mode & Reading Mode for WordPress 1.0.8

The Dracula Dark Mode plugin for WordPress, which adds features like Enhanced Accessibility, Dark Mode, and Reading Mode, has a security flaw. This vulnerability, called Stored Cross-Site Scripting, allows attackers with certain levels of access to add harmful code to web pages. This can happen in any version of the plugin up to version 1.0.8, because the plugin does not properly clean or protect against user-inputted attributes. To protect against this vulnerability, it is recommended to update the plugin to a newer version.