The profile-builder plugin prior to 1.1.66 for WordPress has multiple XSS issues in forms.
cozmoslabs profile builder