The events-manager plugin prior to 5.5.7 for WordPress has multiple XSS issues.
wp-events-plugin events manager