WordPress Pinfinity theme <=1.9.2 - Reflected Cross-Site Scripting (XSS) vulnerability

WordPress Pinfinity theme version 1.9.2 and several earlier versions are vulnerable to Reflected Cross-Site Scripting XSS. Proof of concept url sample: https://website.com/wp/?s=alert1 Solution Update the WordPress Pinfinity theme to the latest available version at least version 2.0...