The profile-builder plugin prior to 2.4.2 for WordPress has multiple XSS issues.
cozmoslabs profile builder