The WordPress UK Cookie third party plugin suffers from a cross site scripting vulnerability.
ac711c6e6c7ff2e01916df2bf23311f242efc228bcf33098b6a7937f76371bdc
The plugin uk-cookie has a reflective XSS injection possible while using it.
http://wordpress.org/extend/plugins/uk-cookie/
Script Used- <script>alert('hacked')</script>
CVE-2012-5856