WPScan

WP Lightbox 2 < 3.0.7 - Admin+ Stored XSS

LeadConnector < 3.0.22 - Unauthenticated Rest Call

ThemeREX Addons < 2.38.5 - Unauthenticated Arbitrary File Upload

Get Use APIs < 2.0.10 - Contributor+ Stored XSS

Timetics < 1.0.52 - Unauthenticated Payment/Booking Status Update

Reading progressbar < 1.3.1 - Admin+ Stored XSS

Gutena Forms < 1.6.1 - Contributor+ Arbitrary Limited Options Update

WP Front User Submit < 5.0.6 - Unauthenticated Sensitive Information Exposure

Divi Booster < 5.0.2 - Unauthenticated PHP Object Injection

Datalogics Ecommerce Delivery < 2.6.60 - Unauthenticated Privilege Escalation