WPScan

AutomatorWP < 6.0.7 - Unauthenticated Zoom/AWeber Integration Connection Hijack via OAuth Callback

Surfer < 1.8.1.759 - Contributor+ Privilege Escalation via Editor API Key Disclosure

All-in-One Video Gallery < 5.1.0 - Unauthenticated Views and Duration Post Meta Write

All-in-One Video Gallery < 5.1.0 - Subscriber+ Stored XSS via 'image' Post Meta

WCFM Membership < 2.12.1 - Subscriber+ Payment Verification Bypass

iubenda < 3.13.7 - Unauthenticated Stored XSS via Cookie Block HTML Parser

Cool Media Filter <= 1.0.1 - Subscriber+ Privilege Escalation via role_permission

Blocks for ShopEngine < 2.4.4 - Contributor+ Stored XSS via gutenova_store_css

MC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Arbitrary Shortcode Execution via Dynamic Content Tag

WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload