The tubepress plugin before 1.6.5 for WordPress has XSS.Referenceshttps://wordpress.org/plugins/tubepress/#developers