WPScan

MasterStudy LMS < 3.7.46 - Subscriber+ Cross-Instructor Order Data Disclosure via author_id Parameter

MasterStudy LMS < 3.7.46 - Unauthenticated Student Enrollment Disclosure via student-courses REST Route

MasterStudy LMS < 3.7.46 - Instructor+ Quiz Answer Disclosure via IDOR

MasterStudy LMS < 3.7.46 - Unauthenticated Unpublished Course Title Disclosure via course-list REST Route

MasterStudy LMS < 3.7.46 - Instructor+ Cross-Course Curriculum Deletion and Tampering via IDOR

MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure via student/stats REST Route

WC Vendors < 2.7.2.1 - Order Shipment Status Change via CSRF

WC Vendors < 2.7.2.1 - Vendor+ Cross-Vendor Order Shipment Status Change

WC Vendors < 2.7.2.1 - Vendor+ Cross-Vendor Product and Arbitrary Post Modification via IDOR

JetStyleManager < 1.3.9 - Skin Deletion and Modification via CSRF