CVE-2018-16285
The UserPro plugin through 4.9.23 for WordPress allows XSS via the shortcode parameter in a userpro_shortcode_template action to wp-admin/admin-ajax.php.
Date published : 2018-09-06
https://risataim.blogspot.com/2018/09/xss-en-plugin-userpro-de-wordpress.html