WordPress Paid Memberships Pro plugin version 1.8.4.2 suffers from a cross site scripting vulnerability.