CVE-2020-12696

The iframe plugin before 4.5 for WordPress does not sanitize a URL...