The plugin used for online shopping on WordPress websites, called “eCommerce Product Catalog”, has a security vulnerability in versions up to 3.3.28. This means that someone without proper authorization can manipulate the settings of the plugin if they can trick the site administrator into clicking on a link.