WPScan

Rank Math SEO < 1.0.280 - Admin+ Stored XSS via Redirection Source URL

Portfolio Filter Gallery < 2.2.1 - Contributor+ Missing Authorization via Multiple AJAX Actions

Portfolio Filter Gallery 2.0.2 - 2.2.0 - Contributor+ Cross-User Video Thumbnail Deletion via pfg_delete_video_thumbnail

Accept PayPal Payments using Contact Form 7 < 4.0.7 - Unauthenticated Transaction Status Forgery

Accept PayPal Payments Using Contact Form 7 < 4.0.7 - Unauthenticated PII Disclosure via CSV Export

Booking Package < 1.7.30 - Unauthenticated Booking Customer PII Disclosure

Contest Gallery < 33.0.1 - Unauthenticated Email Verification Bypass via Brute-Forceable Registration PIN

W3 Total Cache < 2.10.6 - Author+ Path Traversal via CDN Media Library Import

Gallery PhotoBlocks 1.3.5 - Contributor+ Stored XSS

Tutor LMS 4.0.5 - 4.1.0 - Instructor+ Arbitrary Post Reparenting via IDOR