WPScan

All-in-One WP Migration and Backup < 7.106 - Unauthenticated Arbitrary-Location Log File Write via Path Traversal

LearnPress < 4.4.1 - Reflected XSS via c_search

PayPlus Payment Gateway < 8.2.2 - Unauthenticated Order Payment Metadata Tampering

PayPlus Payment Gateway < 8.2.2 - Unauthenticated Order Key Disclosure and Order Status Modification

Unlimited Elements for Elementor < 2.0.11 - Unauthenticated Stored XSS via Google Reviews Widget

Reviews Feed < 2.6.5 - Unauthenticated Stored Arbitrary Shortcode Execution via Google Reviews

All in One SEO < 4.9.9 – Contributor+ Incorrect Authorization via AI Integration

Modern Events Calendar (Lite & Pro) < 7.34.0 - Unauthenticated SQL Injection via mec_list_load_more

WP Travel < 11.7.1 - Unauthenticated Arbitrary Booking Cancellation

SlimStat Analytics < 5.5.0 - Unauthenticated Stored XSS via CF-IPCountry Header