WordPress anti-plagiarism 3.6.0 and prior are vulnerable to reflected cross-site scripting.
View the template here CVE-2016-1000128.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2016/CVE-2016-1000128.yaml
References: