WPScan

LatePoint < 5.7.3 - Unauthenticated Customer PII Disclosure via IDOR

Database Addon For WPForms < 1.1.1 - Arbitrary Form Entry Deletion via CSRF

BackWPup < 5.7.7 - Unauthenticated Sensitive Data Disclosure via Restore Working Directory on NGINX

BackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.php

BackWPup < 5.7.7 - Admin+ Path Traversal to RCE via Restore PclZip Fallback

Wallet System for WooCommerce < 2.8.0 - Subscriber+ Store-Wide Wallet Transaction Disclosure via Export

Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Arbitrary Wallet Balance Theft via IDOR

Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Forged Wallet Withdrawal Request via IDOR

SMS Alert 3.6.4 - 4.0.0 - Admin+ Network User Billing Phone Disclosure via Bulk User Actions

Track Orders for WooCommerce < 1.2.7 - Unauthenticated PII Disclosure via 'email' Parameter