WPScan

Sensei LMS < 4.24.4 - Unauthenticated sensei_email/sensei_message Disclosure

BookingPress < 1.1.23 - Unauthenticated Export File Download

The Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events Access

WP-Syntax <= 1.2 - Author+ Potential ReDoS

User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation

WP-GeSHi-Highlight <= 1.4.3 - Author+ ReDoS

Ebook Store < 5.8015 - Reflected XSS via $_SERVER['REQUEST_URI']

Structured Content < 1.7.0 - Contributor Stored XSS

QSM < 10.2.3 - Template Creation via CSRF

Injection Guard < 1.2.8 - Reflected XSS via $_SERVER['REQUEST_URI']