The social-buttons-pack plugin prior to 1.1.1 for WordPress has multiple XSS issues.
bestwebsoft social buttons pack