CVE-2021-25071
The WordPress plugin through 2.0.1 does not sanitise and escape the translation parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
Date published : 2022-03-28
https://wpscan.com/vulnerability/53085936-fa07-4f00-a7dc-bbe98c51320e