WPScan

Payex Payment Gateway for WooCommerce <= 1.2.10 - Unauthenticated Payment Confirmation Forgery via Empty-Default Secret Key

Payment Integration Wompi <= 4.0.1 - Unauthenticated Payment Confirmation Forgery via IPN Callback

Payconiq for WooCommerce <= 1.0.4 - Unauthenticated Order Key Disclosure

Casso Auto-confirm Bank Transfer < 4.2.0 - Unauthenticated WooCommerce Order Payment Confirmation

Checkout Files Upload for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File Upload

Thrive Automator < 11.2 - Editor+ Blind SQLi via 'additional' Parameter

WooCommerce Menu Cart < 3.2.1 - Unauthenticated Stored XSS via Cart Item Variation Attribute

Booking Package < 1.7.33 - Unauthenticated Verification Email Sending to Arbitrary Recipient

Court Reservation < 1.12.4 - Unauthenticated Arbitrary Challenge Deletion

Court Reservation < 1.12.4 - Unauthenticated Reservation Type Addition and Deletion