Erwan LR (WPScan)

WP User Frontend < 4.3.12 - Subscriber+ Post Creation via Subscription-Gated Form

Paytm Payment Gateway < 2.8.9 - Unauthenticated SQLi via Payment Callback

All in One Files Upload for WooCommerce < 2.0.17 - Subscriber+ Arbitrary Plugin Settings Update

Solace Extra < 1.7.2 - Unauthenticated Non-Published Post Content Disclosure via Preview Routes

Post Voting System <= 1.0 - Subscriber+ SQLi via 'row' Parameter

WP Review Slider Pro < 12.7.12 - Subscriber+ SQLi via Stored Template Filter

WP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review Form Fields

WP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review Import

Zportals < 6.4.2 - Subscriber+ User Email Disclosure

Zportals < 6.4.2 - Subscriber+ Arbitrary Plugin Settings Update