CVE-2017-18564

The sender plugin before 1.2.1 for WordPress has multiple XSS issues...