WPScan

LearnPress < 4.4.7 - Unauthenticated Student Enrollment Disclosure via load_content_via_ajax

LearnPress < 4.4.7 - Unauthenticated Order Data Disclosure via lp_download_order

LearnPress < 4.4.7 - Unauthenticated Unpublished Course Disclosure via REST API

Visualizer < 4.0.8 - Contributor+ Stored XSS via JSON Data Source

Newsletter < 9.3.7 - Unauthenticated Open Redirect and Subscriber Token Disclosure via ncu Parameter

Seraphinite Accelerator < 2.29.24 - Subscriber+ DoS via seraph_accel_State Update

Subscriptions for WooCommerce < 2.0.3 - Unauthenticated Subscription Data Disclosure via REST API Secret Key Bypass

Subscriptions for WooCommerce < 2.0.3 - Subscription Cancellation via CSRF

Rox Appointment Booking < 1.2.8 - Unauthenticated Staff PII Disclosure via Agent REST Route

Rox Appointment Booking < 1.2.8 - Unauthenticated Internal Notes Disclosure via Service and Category REST Routes