WPScan

Library Management System < 3.6.7 - Subscriber+ SQL Injection via Filter Value

Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Code Brute Force

Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Verification State Keyed on a Client-Supplied Address Header

Single Sign On For TNG < 2.2.0 - Unauthenticated Arbitrary Password Reset

FoodBoxBooker < 1.0.7 - Unauthenticated Arbitrary Password Reset

Arvow AI SEO Writer < 1.5.4 - Unauthenticated Arbitrary Post Creation via Webhook Secret Type-Juggling

Bricksforge < 3.1.8.8 - Unauthenticated Arbitrary Password Reset via Pro Forms

Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch

Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication

WordPress File Upload < 5.1.8 - Unauthenticated SQL Injection via uniqueuploadid