Multiple WordPress plugins vulnerable to HTML injection. https://blog.nintechnet.com/multiple-wordpress-plugins-vulnerable-to-html-injection/