WPScan

Speed Optimizer < 7.8.5 - Admin+ Stored XSS via DNS Prefetch and Font Preload URL Lists

Speed Optimizer < 7.8.5 - Admin+ Network Option Update via enable-option/disable-option

Profile Builder < 4.0.5 - Contributor+ Stored XSS via redirect_url Shortcode Attribute

Profile Builder < 4.0.5 - Multisite Subsite Admin+ Network Super Admin Account Takeover via Edit Profile Email Change

Download Monitor < 5.3.5 - Multisite Subsite Admin+ Incorrect Authorization via Approved Download Paths REST Route

Popup Builder < 4.4.6 - Unauthenticated Popup Trashing via post_type Parameter

Depicter 4.0.5 - 4.8.1 - Editor+ Arbitrary File Upload via Media Upload

LiteSpeed Cache < 7.9.2 - Unauthenticated Stored XSS via CDN Inline CSS Rewriting

LiteSpeed Cache < 7.9.2 - Unauthenticated Stored XSS via Font Display Optimization

LiteSpeed Cache < 7.9.2 - Subscriber+ Pinned Administrative Notice Dismissal