WPScan

Ajax Load More < 8.0.1 - Unauthenticated SQL Injection via custom_args

Templately < 3.7.1 - Unauthenticated Administrator Templately Cloud Connection Overwrite

Ninja Forms < 3.14.10 - Unauthenticated Arbitrary Shortcode Execution via Query-String Populated Field Default

RealHomes Memberships < 3.1.0 - Subscriber+ Membership Payment Bypass

BNE Testimonials < 2.0.8.2 - Contributor+ Stored XSS via Slider Shortcode

Simple CAPTCHA with Cloudflare Turnstile < 1.42.0 - Unauthenticated Turnstile Protection Bypass via Reusable Forminator Cache Key

Hotel Booking Lite < 6.2.3 - Subscriber+ Customer Data Modification via IDOR

Hotel Booking Lite < 6.2.3 - Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint

Nested Pages < 3.2.15 - Editor+ Stored XSS via Post Title

YayPricing < 3.5.7 - Subscriber+ Pricing Configuration Modification and Coupon Code Disclosure