WPScan

click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Stored XSS via post_notifications

click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Stored XSS via post_notifications

click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Stored XSS via post_notifications

Mindstien Quick Login <= 1.0 - Unauthenticated Administrator Account Takeover via 'mql_pass' Parameter

Freeton WP <= 1.0.0 - Unauthenticated Account Takeover via 'secod' Parameter

AI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and Deletion

Insurify <= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite via saveemailtemplatedesign

Crowdfundly <= 2.2.2 - Crowdfundly Manager+ Privilege Escalation

Quick quotes <= 1.0.0 - Unauthenticated Integer-Value Option Update

Insurify <= 1.0 - Unauthenticated Arbitrary Option Deletion via removeimg_popup