WPScan

Super Payments < 1.43.1 - Unauthenticated Payment Confirmation Forgery via Webhook Signature

SendPress Newsletters <= 1.26.1.20 - Subscriber+ Mailing List Sync and Newsletter Queueing

SendPress <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure via Hardcoded Token

SKU Error Fixer for WooCommerce <= 1.0 - Unauthenticated Orphaned Product Variation Deletion

Social Web Suite <= 4.1.12 - Unauthenticated Arbitrary Plugin Settings Update

UnitechPay <= 1.0.6.3 - Unauthenticated Order Payment Bypass via Unsigned Webhook

AWP Classifieds < 4.4.9 - Admin+ Arbitrary File Upload via ZIP Import

Code Snippets < 3.10.0 - Admin+ Network-Scoped Snippet Activation and Deactivation via update_code_snippet

Code Snippets < 3.10.0 - Admin+ SQLi in Migration Importers Leading to Network-Wide Credential Disclosure (Multisite)

FooSales < 1.43.3 - Subscriber+ Privilege Escalation via User Impersonation