WordPress Stop User Enumeration 1.3.7 and earlier are vulnerable to unauthenticated reflected cross-site scripting.
View the template here CVE-2017-18536.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2017/CVE-2017-18536.yaml
References: