iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via addqueryarg() and removequeryarg().
iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via addqueryarg() and removequeryarg().
iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via addqueryarg() and removequeryarg().