WPScan

Help Desk WP <= 1.2.0 - Editor+ Stored XSS

Active Directory Integration / LDAP Integration < 4.1.1 - Unauthenticated Data Disclosure

RapidExpCart <= 1.0 - Stored XSS via CSRF

Clock In Portal <= 2.1 - Holidays Deletion via CSRF

tagDiv Composer < 4.0 - Reflected Cross-site Scripting

WooCommerce Order Status Change Notifier <= 1.1.0 - Subscriber+ Arbitrary Order Status Update

KIWIZ Invoices Certification & PDF System <= 2.1.3 - Unauthenticated Arbitrary File Download

BizLibrary <= 1.1 - Admin+ Stored XSS

Thumbnail carousel slider < 1.1.10 - Reflected XSS

Clock In Portal <= 2.1 - Designation Deletion via CSRF