WPScan

WholesaleX < 3.0.9 - Unauthenticated Imported User CSV Disclosure

SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via Redirect Callback

TI WooCommerce Wishlist < 2.13.0 - Unauthenticated Private Wishlist Disclosure via share_key

Advanced File Manager 5.4.13 - 5.4.14 - Authenticated Stored XSS via SVG Sanitiser Content-Sniff Bypass

Elementor < 4.3.5 - Author+ Stored XSS via SVG Upload

Elementor < 4.3.5 - Contributor+ Stored XSS via SVG CDATA Sanitizer Bypass

Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS

Download Manager (Free & Pro) - Privacy Settings Update via CSRF

Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Order Status Change via Payment Webhook

Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Merchant Credential Overwrite via Install Webhook