WPScan

Persian WooCommerce SMS 7.2.0 - 7.3.1 - Reflected XSS via 'pwsms_mobiles' Parameter

Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id' Parameter

Welcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect via 'usces_referer' Parameter

Welcart e-Commerce < 2.12.6 - Author+ Arbitrary Product SKU Update and Disclosure via item_sku_ajax

GoSMTP < 1.2.5 - Plugin Activator+ Privilege Escalation via SMTP Settings

Royal MCP 1.4.38 - 1.5.9 - Subscriber+ Non-Public Post Disclosure via wp_search Ability

Royal MCP < 1.5.10 - Contributor+ Private and Draft Content Disclosure and publish_posts Bypass via elementor_clone_page

MP3 Audio Player by Sonaar 5.9 - 5.15 - Contributor+ Stored XSS via Shortcode Attribute

Media Library Assistant < 3.42 - Bulk Attachment Deletion via CSRF

Media Library Assistant < 3.42 - Trashed Attachment Deletion via CSRF