WPScan

AZEXO Store Locator <= 1.4 - Subscriber+ Arbitrary File Write via azt_items_import

mView <= 1.0.3 - Subscriber+ Arbitrary File Upload

EASY-JS-WPAPI <= 2.0 - Unauthenticated Administrator Password Disclosure and Authentication Bypass

Grand Job <= 1.2.1 - Unauthenticated Account Takeover via Empty Password Reset Code

Mail Debug for WooCommerce <= 1.3.0 - Unauthenticated Sent Email Disclosure Leading to Account Takeover

Limit Login Attempts Reloaded 3.0.0 - 3.4.0 - Two-Factor Authentication Bypass via XML-RPC

Limit Login Attempts Reloaded < 3.4.1 - Two-Factor Authentication Bypass via Malformed X-Forwarded-For Header

All-in-One Video Gallery < 5.1.1 - Unauthenticated Password-Protected Video Disclosure via Player Page and Download Handler

Fusion Page Builder < 1.7.1 - Contributor+ Arbitrary Post Trashing via IDOR

Post Duplicator < 3.0.18 - Admin+ Arbitrary Option Update via Unvalidated Option Name