WPScan

WP ERP < 1.17.11 - Subscriber+ Sensitive Data Disclosure via Audit Log

Form Maker by 10Web < 1.15.51 - Unauthenticated Stored XSS via Submission Field Values

Booking Package < 1.7.34 - Unauthenticated Payment Bypass

Kali Forms < 2.4.29 - Author+ Stored XSS via Button Click Action

SEOPress < 10.4 - Authenticated Stored XSS via Analytics Tracking Settings

FV Flowplayer Video Player < 7.5.56.7212 - Contributor+ Arbitrary Video and Meta Record Deletion, Video Modification and Meta Disclosure via IDOR

FV Flowplayer Video Player 7.4.44.727 - 7.5.55.7212 - Contributor+ Bulk Video Record Disclosure and Modification via Migration Wizard

PowerPack Addons for Elementor 2.10.0 - 3.1.2 - Contributor+ SSRF via Charts Widget CSV Import

Essential Real Estate 4.4.3 - 5.3.4 - Subscriber+ Arbitrary Media Attachment Deletion via IDOR

Post Duplicator < 3.0.17 - Contributor+ Draft and Private Post Title Disclosure