WPScan

All-in-One Video Gallery < 5.0.0 - Unauthenticated Private and Draft Video Disclosure

Mapster WP Maps < 2.0.6 - Unauthenticated Arbitrary Post Modification via save-mapmaker REST Route

Quick Event Manager 8.4.6 - 9.18 - Unauthenticated Private and Draft Content Disclosure via ICS Download

PAYable IPG < 1.3.1 - Unauthenticated Order Payment Forgery via Unsigned Callback

Kali Forms < 2.4.30 - Subscriber+ User Email Address Disclosure

Kali Forms < 2.4.30 - Subscriber+ Email Sending and Sender Spoofing

Media Library Assistant < 3.44 - Subscriber+ Missing Authorization via mla-fill-compat-fields

Media Library Assistant < 3.44 - Contributor+ Stored XSS via mla_item_parameter Shortcode Attribute

MapPress Maps for WordPress < 2.97.15 - Unauthenticated Email Address Disclosure

PDF Invoices & Packing Slips for WooCommerce 5.16.2 - 5.16.4 - Unauthenticated Stored XSS via Order Address and Customer Note Fields