WPScan

Secure Custom Fields < 6.9.8 - Admin+ Stored XSS via HTML Attribute Name Injection into Field Definition

Antom Payments <= 2.0.11 - Unauthenticated WooCommerce Order Data Disclosure

Pie Register <= 3.8.4.15 - Unauthenticated Plugin Settings Reset and Redirect Data Destruction

Pie Register <= 3.8.4.15 - Contributor+ Invitation Code Modification

Contact Form 7 6.2 - 6.2.3 - Unauthenticated Arbitrary File Upload via Invalid UTF-8 Filename

Turisbook Booking System <= 1.3.8 - Unauthenticated Stored XSS via Cart Background Setting

BackUpWordPress < 3.15 - Subscriber+ Backup Directory File Deletion via hmbkp_dismiss_error

Razorpay for WooCommerce < 4.8.9 - Unauthenticated Order Data Disclosure via 1CC Coupon Apply

Razorpay for WooCommerce < 4.8.9 - Unauthenticated User Context Switch via 1cc Coupon Route

Razorpay for WooCommerce < 4.8.9 - Admin+ SQLi via Webhook