WPScan

nexi Alpha Bank for WooCommerce <= 2.2.0 - Unauthenticated Payment Confirmation Forgery via Empty Shared Secret

Enable Media Replace 4.1.4 - 4.2.2 - Unauthenticated PHP Object Injection via Metadata Replacer

Security by CleanTalk < 2.191 - Unauthenticated Authentication Bypass via Authenticator App Code

Security by CleanTalk < 2.191 - Admin+ Sensitive Data Disclosure via FSWatcher File Viewer

WP User Frontend < 4.3.14 - Reflected XSS via 'field_attr' Parameter

WP Visitor Statistics (Real Time Traffic) < 8.8 - Unauthenticated Stored XSS via Tracker Device Parameters

WP Visitor Statistics (Real Time Traffic) < 8.8 - Admin+ SQLi via 'order' Parameter

Joinchat 6.3.2 - 6.4.1 - Author+ Stored XSS via Button Block Message Attribute

Fraud Prevention For WooCommerce and EDD < 2.3.6 - Subscriber+ Arbitrary Customer Blacklisting

BuddyForms < 2.10.3 - Unauthenticated Form Configuration Disclosure