WPScan

Fiber Admin 3.1.0 - 4.0.0 - Unauthenticated RCE via Host Header

Fiber Admin < 4.0.1 - Unauthenticated Arbitrary Post and Term Order Modification via fiad_cpo_update and fiad_cpo_tax_update

Add From Server Reloaded < 6.0.0 - Author+ Stored XSS via SVG Upload

Magic Link < 2.2.6 - Subscriber+ Privilege Escalation via Magic Link Generation

Event Tickets with Ticket Scanner < 3.1.14 - Authenticated Ticket Data Disclosure and Removal via executeWCBackend

Event Tickets with Ticket Scanner < 3.2.9 - Authenticated SQLi via DataTables Search

Exsile SMS Gateway < 2.0.0 - Subscriber+ Privilege Escalation via Arbitrary Option Update

Komfortkasse for WooCommerce < 1.4.9 - Administrator Account Creation via CSRF

Easy Social Icons < 4.0.3 - Admin+ Stored XSS via Icon Color Settings

Cloud Blocks <= 1.1.8 - Unauthenticated Stored XSS