The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues.
View the template here CVE-2017-18500.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2017/CVE-2017-18500.yaml
References: