WPScan

Support Genix Lite < 1.4.48 - Unauthenticated Ticket Attachment Download via Missing Authorization

ShopMonitor.io < 1.2.0 - Unauthenticated Administrator Account Takeover via Password-Reset Email Reroute

GiveWP < 4.16.3 - Unauthenticated Payment Gateway Restriction Bypass

Demi - One Click Demo Import, Backup & Site Migration < 0.0.7 - Unauthenticated Sensitive Data Exposure via Public Backup Directory

FlxWoo < 3.1.1 - Unauthenticated Payment Bypass

Lightbox with PhotoSwipe < 5.9.0 - Author+ Stored XSS via data-lbwps-caption Attribute

Events Made Easy < 3.1.4 - Unauthenticated Person Data Modification via IDOR

Paid Member Subscriptions < 3.0.7 - Subscriber+ Payment Data Disclosure via IDOR

Paid Member Subscriptions < 3.0.7 - Unauthenticated Sensitive Information Exposure via Residual Export Files

FluentCart < 1.5.3 - Unauthenticated Order PII Disclosure via Print Routes