WPScan

Donation <= 1.0 - Admin+ SQLi

DB Access <= 0.8.7 - Subscriber+ SQLi

Pure WC Variation Swatches <= 1.1.7 - Unauthenticated Settings Update

HelloLeads CRM Form Shortcode <= 1.0 - Unauthenticated Settings Reset

WPBookit <= 1.0.7 - Customer Deletion via CSRF

Broken Link Manager <= 0.6.5 - Reflected XSS

Bookingor <= 1.0.12 - Subscriber+ Category Deletion

Attention Bar <= 0.7.2.1 - Admin+ SQLi

Age Restriction <= 3.0.2 - Subscriber+ Privilege Escalation

Make Email Customizer for WooCommerce <= 1.0.6 - Subscriber+ Arbitrary Options Update