The Backup Guard plugin prior to 1.1.47 for WordPress has multiple XSS issues.
backup-guard backup guard