The sender plugin before 1.2.1 for WordPress has multiple XSS issues.Referenceshttps://wordpress.org/plugins/sender/#developers
