Input validation vulnerability in EPay.bg Payments 0.1

The EPay.bg Payments tool for WordPress has a security flaw that allows harmful code to be inserted into the website through the ‘epay’ feature. This can happen in all versions up to and including 0.1 because the plugin does not properly check and protect against dangerous code entered by users. This means that someone with contributor-level access or higher can add malicious code to a page that will run when someone visits that page.