WPScan

Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR

Quiz And Survey Master < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR

TenWeb Speed Optimizer < 2.33.5 - Unauthenticated Stored XSS via Critical CSS Token Bypass

WCFM Marketplace < 3.8.1 - Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDOR

Eventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR

Eventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOR

Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation

Eventin < 4.1.21 - Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR

Dinatur <= 1.18 - Unauthenticated SQL Injection via Column Name Injection

Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_ui