WPScan

Product Filter for WooCommerce by WBW < 3.1.3 - Unauthenticated SQLi

YML for Yandex Market < 5.0.26 - Shop Manager+ RCE via Feed Generation

YITH WooCommerce Wishlist < 4.13.0 - Unauthenticated Arbitrary Wishlist Renaming via IDOR

ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure

SQL Chart Builder < 2.3.8 - Unauthenticated SQL Injection

Link Whisper Free < 0.9.1 - Unauthenticated Settings and User Meta Update

Popup Box AYS Pro < 5.5.0 - Admin+ Stored Cross-Site Scripting (XSS) via CSRF

Spam Protect for Contact Form 7 < 1.2.10 - Editor+ Remote Code Execution

Performance Monitor <= 1.0.6 - Unauthenticated Blind SSRF

DukaPress <= 3.2.4 - Reflected XSS