WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. versions prior to WordPress plugin Page Generator 1.6.5 are vulnerable to a cross-site scripting vulnerability that stems from the plugin’s failure to clean and escape its settings, which could be exploited by attackers to perform cross-site scripting attack.