Erwan LR (WPScan)

WP Directory Kit < 1.5.7 - Unauthenticated User Email Disclosure via select_2_ajax_user

WP Directory Kit < 1.5.6 - Subscriber+ SQL Injection via section Parameter

JetEngine < 3.8.14 - Author+ Stored XSS via SVG Upload

WP Photo Album Plus < 9.2.07.002 - Unauthenticated Option Disclosure via gettogo

WP Photo Album Plus < 9.2.07.002 - Unauthenticated Arbitrary ZIP File Deletion via delmyzip Path Traversal

Cookie Consent < 0.0.10 - Subscriber+ MaxMind License Key Update

Estatik Real Estate Plugin < 4.3.4 - Unauthenticated Arbitrary-Recipient Mail Relay via Signed-Value Mismatch

Content Protector (Passster) < 4.3.9 - Unauthenticated Protected Content Disclosure via REST Path Allowlist Bypass

Link Factory - Backdoor

Media folder Addon < 4.1.7 - Unauthenticated Arbitrary File Download