The simple-membership plugin before 3.5.7 for WordPress has XSS.
Published August 12, 2019.
Simple-membership-plugin Simple Membership