The my-wish-list plugin prior to 1.4.2 for WordPress has multiple XSS issues.
nlb-creationst my wish list