The Wysija Newsletters plugin for WordPress is vulnerable to a security issue which could allow attackers to inject malicious code into a user’s browser. This affects versions up to and including 2.1.6, due to not enough validation and protection of the input data.