XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body.
No PoCs from references.
- https://github.com/20142995/nuclei-templates