The wp-editor plugin before 1.2.6.3 for WordPress has multiple XSS issues.Referenceshttps://wordpress.org/plugins/wp-editor/#developers