WPScan

Upload.am File Hosting VPN < 1.0.1 - Contributor+ Arbitrary Option Disclosure

WP 2FA < 3.0.0 - Second Factor Bypass

Backup Migration < 2.0.0 - Unauthenticated Backup Download

WP Front User Submit < 5.0.0 - Open Redirect

Mstoreapp Mobile (App <= 2.08, Multivendor <= 9.0.1) - Unauthenticated Privilege Escalation

W3 Total Cache < 2.8.13 - Unauthenticated Command Injection

Creta Testimonial Showcase < 1.2.4 - Editor+ Local File Inclusion

WPForms < 1.9.1.6 - Admin+ Stored XSS

TwitterPosts <= 1.0.2 - Settings Update via CSRF

Advanced Schedule Posts <= 2.1.8 - Reflected XSS