The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues.
View the template here CVE-2017-18562.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2017/CVE-2017-18562.yaml
References: