Share
## https://sploitus.com/exploit?id=WPEX-ID:B586B217-F91E-42D3-81F1-CC3EE3A4B01E
In the plugin's settings, tick 'Custom Button' and put the following payload in the Text field: <img src=x onerror=alert(/XSS/)>

The XSS will be triggered when accessing the plugin's settings page, as well as all frontend pages