WPScan

WPS Bidouille < 1.33.5 - Subscriber+ User Email Disclosure via wps_get_users

Membership For WooCommerce < 3.1.2 - Unauthenticated Member Data Disclosure via REST Consumer Secret Bypass

KiviCare < 4.5.4 - Patient+ Arbitrary Media Attachment Read via IDOR

KiviCare < 4.5.4 - Patient+ Cross-Patient Appointment Modification via IDOR

Easy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments Listing

ProSolution WP Client < 2.0.11 - Reflected XSS via 'page' Parameter

ProSolution WP Client < 2.0.11 - Reflected XSS via Multiple Parameters

Broken Link Checker < 2.4.12 - Unauthenticated RCE via Query Variable Injection

TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Appointment and Payment Record Deletion via update_appointment_booked

TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Customer PII Disclosure via Multiple AJAX Actions