WPScan

All in One SEO < 5.0.0.1 - Contributor+ Stored XSS via ai-assistant Block

WP Express Checkout < 2.4.9 - Unauthenticated Payment Bypass via wpec_process_payment

Xpro Elementor Addons 1.6.0 - 1.7.3 - Contributor+ Stored XSS via Multiple Widgets

Weaver Show Posts < 1.8.1 - Admin+ PHP Object Injection

LiveJournal Shortcode <= 1.1.1 - Contributor+ Stored XSS via Shortcode

Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data Disclosure

Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints Call

Passster < 4.2.24 - Password Protection Bypass

Passster < 4.2.26 - Global Protection Bypass

Wp Edit Password Protected < 1.3.5 - Protection Bypass via REST API