WPScan

LTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated Stored XSS via Shipping Rules

LTL Freight Quotes – Old Dominion Edition 4.2.11 - 4.2.18 - Unauthenticated SQLi via Shipping Rule 'edit_id' Parameter

SMS Alert 4.0.0 - Unauthenticated Authentication Bypass via Login with OTP

User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)

Kirki < 6.3.2 - Unauthenticated Arbitrary Shortcode Execution via Comments Collection

Kirki < 6.3.2 - Editor+ Blind SSRF via Remote Template URL

Testimonials by BestWebSoft 1.0.5 - 1.0.8 - Unauthenticated SQLi via 'offset' Parameter

GDPR Data Request Form 1.5 - 1.7.1 - DPO Email Update via CSRF

Shipping for Nova Poshta 1.18.7 - 1.19.8 - Unauthenticated Order Shipment Record Deletion

Livees Checkout 6.8 - 7.0.2 - Unauthenticated Order Status Change, Order Note Injection & Order Key Disclosure