WPScan

vTables < 0.3 - Unauthenticated SQL Injection via orderby Parameter

LetterPress < 2.4.0 - Admin+ Stored XSS

Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection

LatePoint < 5.7.6 - Admin+ Stored XSS via Booking Form Step Settings

WP Post Author < 4.2.0 - Unauthenticated Modification of the First User Account's Profile Fields

WP Post Author < 4.2.0 - Unauthenticated reCAPTCHA Secret Key Disclosure

Wallet System for WooCommerce < 2.8.2 - Subscriber+ KYC Document Overwrite via IDOR

Hide Price Until Login < 1.1.2 - Unauthenticated Account Creation via Guest Registration

Enable SVG, WebP, and ICO Upload 1.1.3 - 1.1.5 - Author+ Stored XSS via SVG Sanitization Bypass

Enable SVG, WebP, and ICO Upload < 1.1.6 - Author+ Stored XSS via SMIL Animation Bypass