Description The clean-login plugin before 1.5.1 for WordPress has reflected XSS. References https://wordpress.org/plugins/clean-login/#developers