WPScan

Vitepos < 3.6.0 - Admin+ SQL Injection via product-details-report

Vitepos < 3.6.0 - Outlet Manager+ Privilege Escalation

Bit Assist < 1.8.2 - Unauthenticated Arbitrary File Upload via Response Endpoint

YMC Filter < 3.12.8 - Contributor+ Stored XSS via Layout Builder Schema

WP Statistics < 14.16.10 - Subscriber+ Sensitive Data Disclosure via Metabox AJAX Handlers

Admin Safety Guard < 1.4.0 - Unauthenticated User Data Disclosure via 2fa/app/users REST Route

WP Directory Kit < 1.5.5 - Subscriber+ Contact Message and User Data Disclosure

WP Directory Kit < 1.5.5 - Subscriber+ Plugin Settings and API Key Disclosure

WP Directory Kit < 1.5.5 - Subscriber+ User and Unpublished Listing Disclosure

GeoDirectory < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint