WPScan

Paymentfor Gateway for WooCommerce < 1.0.6 - Unauthenticated Order Payment Forgery via Unverified Card Callbacks

Cart Abandonment Recovery for WooCommerce < 2.1.4 - Unauthenticated Abandoned Cart Record Deletion and Modification via IDOR

AWP Classifieds < 4.4.9 - Unauthenticated Listing Contact Email Disclosure via Place Ad Page

Responsive Blocks < 2.3.0 - Unauthenticated HTML Injection in Form Notification Email

Tickera < 3.6.0.4 - Unauthenticated Order Payment Bypass via 2Checkout IPN

WPForms Lite 1.10.0.1 - 2.0.2.1 - Unauthenticated Payment Bypass via PayPal Commerce

Visma Pay for WooCommerce < 1.2.2 - Unauthenticated Payment Bypass and Order Data Disclosure via Gateway Return Endpoint

WPCode 2.0.0 - 2.3.9 - Unauthenticated Snippet Suppression via Safe Mode Bypass

WP-BusinessDirectory <= 4.0.2 - Unauthenticated Arbitrary File Write via uploadFile

WP Testimonials <= 1.4.13 - Author+ Stored XSS via wp-testimonials Shortcode