Input validation vulnerability in Widget Options – Extended 5.2.1

The Widget Options – Extended plugin for WordPress has a security issue that allows attackers to inject harmful code into web pages. This can happen if the attacker has contributor-level access or higher. The plugin is vulnerable in all versions up to and including 5.2.1 because it does not properly filter or protect user-supplied information. This means that the injected code will run whenever someone views the affected page.