WPScan

WP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameter

Google Authenticator < 0.56 - 2FA Secret Overwrite via CSRF

SEO Redirection Plugin – 301 Redirect Manager < 9.19 - Subscriber+ Redirect Rule Disclosure

Advanced Excerpt < 4.5 - Admin+ Stored XSS via Ellipsis Setting

AutoNetTV Relay < 3.0.14 - Unauthenticated Privilege Escalation via Scheduled Sync Cron

Payment Plugins for PayPal WooCommerce < 2.0.20 - Unauthenticated Payment Bypass via Reuse of a Completed PayPal Order

Security Optimizer – The All-In-One Protection Plugin < 1.6.5 - Login Access IP Allowlist Bypass via post_password

Eventin < 4.1.20 - Editor+ Local File Inclusion via speaker_template Setting

Essential Blocks < 6.4.0 - Unauthenticated Non-Public Custom Post Type Content Disclosure via queries Endpoint

Essential Blocks < 6.4.0 - Unauthenticated WooCommerce Sales Data Disclosure via REST products Endpoint