Description The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg. References https://wordpress.org/plugins/option-tree/#developers https://wpvulndb.com/vulnerabilities/9769