WPScan

Masteriyo LMS < 2.3.1 - Unauthenticated Arbitrary User Session Termination (Denial of Service)

The Events Calendar < 6.16.5.1 - Unauthenticated Event Aggregator Import Status Manipulation

Simply Schedule Appointments < 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer Information

QRcode Login for WeChat <= 1.3 - Unauthenticated Account Takeover

WordPress Download Manager < 3.3.62 - Unauthorized Protected File Download via Reusable Download Key

Software Issue Manager < 5.1.0 - Unauthenticated SQL Injection via Search Parameter

ProfileGrid < 5.9.9.7 - Subscriber+ Premium License Tampering via Missing Authorization

ProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization

ProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery

ProfilePress < 4.16.18 - Unauthenticated Privilege Escalation via Registration Role Selection