WPScan

Advanced Classifieds & Directory Pro < 3.4.3 - Unauthenticated Non-Public Listing Custom Field Disclosure

Order Sync with Zendesk for WooCommerce < 2.2.3 - Unauthenticated Customer Order Data Disclosure

ProSolution WP Client < 2.0.11 - Reflected XSS via 'page' Parameter

ProSolution WP Client < 2.0.11 - Reflected XSS via Multiple Parameters

ProSolution WP Client < 2.0.6 - Unauthenticated Blind SQLi via 'jobID' Parameter

ProSolution WP Client < 2.0.9 - Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog Calls

ProSolution WP Client < 2.0.9 - Subscriber+ SSRF via proSol_url_validate

ProSolution WP Client < 2.0.9 - Unauthenticated SQLi and Plugin Data Deletion via 'removesite' Cookie

WP Photo Album Plus < 9.2.09.002 - Subscriber+ Cross-Album File Upload via Missing Authorization

Block User Account < 2.0.1 - Subscriber+ Account Block Bypass via Application Passwords