EPSS
Percentile
46.3%
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code.
Update plugin.
www.vapidlabs.com/wp/wp_advisory.php?v=240
www.openwall.com/lists/oss-security/2016/04/12/8