The data-tables-generator-by-supsystic plugin prior to 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One consequence of this is stored XSS.
supsystic data tables generator