WPScan

Eupago Gateway For Woocommerce 4.5.0 - 4.7.5 - Unauthenticated Payment Confirmation Bypass

CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router

PayHere Payment Gateway 2.4.0 - 2.4.5 - Unauthenticated Payment Bypass via Unverified Payment Notification

Payment Forms for Paystack < 4.0.6 - Contributor+ Sensitive Information Disclosure via Settings Page

Essential Addons for Elementor 6.6.0 - 6.8.7 - Author+ Privilege Escalation via register_user_role

Bulk Media Register < 2.01 - Author+ Arbitrary File Move via Path Traversal

Premium Packages < 7.2.2 - Unauthenticated Order Total Manipulation

Security Optimizer < 1.6.9 - 2FA Bypass via Missing Rate Limiting

BuddyForms 2.8.8 - 2.10.0 - Unauthenticated Guest Attachment Deletion

Firelight Lightbox < 2.3.24 - Contributor+ Stored XSS via Image 'src' Attribute