WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress SEO Smart Links 3.0.1 and previous versions have a cross-site scripting vulnerability that stems from not cleaning and escaping some of its settings, which can be exploited by a highly privileged attacker such as an administrator to launch a cross-site scripting attack.