The error-log-viewer plugin prior to 1.0.6 for WordPress has multiple XSS issues.
bestwebsoft error log viewer