WPScan

Membership For WooCommerce < 3.1.2 - Unauthenticated Member Data Disclosure via REST Consumer Secret Bypass

GutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure

GutenKit < 2.5.0 - Author+ Stored XSS via SVG Upload

Admin and Site Enhancements < 9.0.1 - Author+ Stored XSS via SVG Upload over XML-RPC

ECS < 4.3.10 - Contributor+ Arbitrary Post Meta Disclosure via Dynamic Repeater ACF Source

Copy & Delete Posts < 1.5.6 - Authenticated Arbitrary Post Content and Password Disclosure

KiviCare < 4.5.4 - Patient+ Arbitrary Media Attachment Read via IDOR

KiviCare < 4.5.4 - Patient+ Cross-Patient Appointment Modification via IDOR

Easy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments Listing

Royal Elementor Addons < 1.7.1066 - Contributor+ Stored XSS via Image Accordion Widget Effect Settings