WPScan

Ukr-To-Lat <= 1.3.5 - Contributor+ SQLi via Term Name

PeachPay 1.117.9 - 1.120.69 - Unauthenticated Order Key Disclosure via ConvesioPay BTCPay Status Check

WP Data Access < 5.5.88 - Subscriber+ SSRF

WP User Manager 2.9 - 2.9.19 - Unauthenticated Account Creation via Stripe Registration Payment Bypass

Frontend Admin by DynamiApps <= 3.29.13 - Unauthenticated ACF Options Page Field Update via Form Submission

Frontend Admin by DynamiApps <= 3.29.13 - Admin+ PHP Object Injection

ThirstyAffiliates < 3.12.1 - Unauthenticated Non-Public Affiliate Link Destination Disclosure and Click Statistic Injection

Product Designer <= 1.0.40 - Unauthenticated Design Template Data Injection

Otter Blocks < 3.2.3 - Unauthenticated Open Redirect via Stripe Checkout Block

Tasty Recipes Lite 1.2 - 1.2.10 - Contributor+ Taxonomy Term Creation, Renaming and Deletion