The newstatpress plugin prior to 1.2.5 for WordPress has multiple stored XSS issues.
newstatpress project newstatpress