The anycomment plugin before 0.0.33 for WordPress has XSS.Referenceshttps://wordpress.org/plugins/anycomment/#developers
