The check-email plugin before 0.5.2 for WordPress has XSS.Referenceshttps://wordpress.org/plugins/check-email/#developers
