The cforms2 plugin before 10.5 for WordPress has XSS.Referenceshttps://wordpress.org/plugins/cforms2/#developers
