WPScan

Events Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDOR

Events Manager 7.4.1 - 7.4.4 - Subscriber+ Unpublished Event and Location Disclosure via 'owner' Parameter

SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via bit IPN

WebTotem Backups < 1.1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal

Social Commerce for WooCommerce <= 2.5.4 - Unauthenticated Plugin Option and Product Sync Status Update

JetFormBuilder Stripe Gateway < 1.1.0 - Unauthenticated Blind SQLi via Payment Token

Real3D Flipbook Lite < 5.4 - Author+ Stored XSS

Divi Dash < 1.0.7 - Unauthenticated Denial of Service via IP Address Spoofing

Newsletters < 4.18.1 - Unauthenticated Subscriber Record Overwrite and PII Disclosure via IDOR

Zportals < 6.4.2 - Subscriber+ Arbitrary Plugin Settings Update