WPScan

WP Data Access < 5.5.79 - Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypass

WPC Order Tip for WooCommerce < 3.3.1 - Unauthenticated Order Data Disclosure

InfiniteWP Client < 1.13.6 - Unauthenticated Administrator Account Takeover on Multisite

Cancel Order & Request Woocommerce < 1.3.4.34 - Unauthenticated Order Content Disclosure via Reorder AJAX Actions

WP Directory Kit < 1.5.5 - Unauthenticated SQL Injection via 'field_search' Parameter

LWS Optimize < 4.1.2 - Unauthenticated Stored XSS via Real User Monitoring

WP Maps Pro < 6.1.3 - Unauthenticated Local File Inclusion

WP Maps Pro < 6.1.3 - Unauthenticated Denial of Service

Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure

Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector