WPScan

WP Job Openings < 4.0.0 - Admin+ Stored XSS

Hotel Booking <= 3.8 - Booking Order Creation, Deletion, and Modification via CSRF

Hotel Booking <= 3.8 - Subscriber+ Booking Order PII Disclosure via IDOR

WP Comment Cleaner 6.1 - 7.1 - Subscriber+ Bulk Comment Deletion via nav_delete_all_comment

OrderConvo <= 15.1 - Unauthenticated Arbitrary File Read

Post Snippets <= 4.2.4 - Contributor+ Stored XSS via Snippet Variable

Simple User Registration <= 6.9 - Subscriber+ Arbitrary Email Sending via wpr_send_email_to_user

Prenotazioni <= 1.7.5 - Unauthenticated Stored XSS via Settings Update

Mobile builder <= 1.4.2 - Subscriber+ Privilege Escalation to Admin

Mobile Builder <= 1.4.2 - Unauthenticated SQLi via 'vendor_id' Parameter