WPScan

Brizy - Page Builder < 2.8.19 - Contributor+ Template Type Update via IDOR

Brizy - Page Builder < 2.8.19 - Contributor+ Stored XSS via Featured Image Focal Point

Brizy - Page Builder < 2.8.19 - Author+ Stored XSS via brizy_set_project Global Project Code Asset

Event Booking Manager for WooCommerce (Pro) < 5.0.3 - Unauthenticated Payment Bypass via Client-Controlled Ticket Price

Welcart e-Commerce < 2.11.32 - Editor+ SQL Injection via CSV Import

Contest Gallery < 30.0.7 - Subscriber+ OpenAI Prompt History Disclosure via post_cg_get_openai_prompts

Contest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_login

Drag and Drop Multiple File Upload for WooCommerce < 1.1.8 - Unauthenticated File Deletion via Nonce Oracle

MStore API < 4.21.0 - Unauthenticated Product Review Creation

MStore API < 4.21.0 - Subscriber+ Order and Customer PII Disclosure via IDOR