The social-login-bws plugin prior to 0.2 for WordPress has multiple XSS issues.
bestwebsoft social login