CVE-2015-9469

The content-grabber plugin 1.0 for WordPress has XSS via objfieldname or objfieldid...

CVE-2017-18590

The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues...

CVE-2017-18579

The corner-ad plugin before 1.0.8 for WordPress has XSS...

CVE-2016-10908

The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS...

CVE-2015-9302

The simple-fields plugin before 1.4.11 for WordPress has XSS...

CVE-2018-10580

The "Latest Posts on Profile" plugin 1.1 for MyBB has XSS because there is an added section in a user profile that displays that user's most recent posts without sanitizing the tsubject aka thread subject field...

WP Editor <= 1.2.6.2 - Multiple Cross-Site Scripting (XSS)

The WP Editor WordPress plugin was affected by a Multiple Cross-Site Scripting XSS security vulnerability...