The ultimate-member plugin prior to 2.0.52 for WordPress has XSS during an account upgrade.
ultimatemember ultimate member