WPScan

WP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review Form Fields

WP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review Import

WebFacing Email Accounts for cPanel 5.3 - 5.3.6 - Unauthenticated LFI via assets/index.php

UpdraftPlus 1.23.8 - 1.26.7 - Subscriber+ Remote Storage Credential Disclosure via Migration Notice

Ad Inserter 2.8.12 - 2.8.18 - Subscriber+ RCE / Stored XSS via Global Custom Fields

File Manager 7.2.2 - 8.0.4 - Unauthenticated Database Backup Disclosure

PowerPress < 11.17.2 - Contributor+ Stored XSS via Podcast Player Block

NextScripts: Social Networks Auto-Poster < 4.4.8 - Authenticated Social Account Credential Disclosure and Data Deletion

Optima Express 8.6.0 - 8.7.5 - Author+ Stored XSS via faq_script

Optima Express 8.5.0 - 8.7.5 - Unauthenticated Author Account Creation & Application Password Rotation via ihf_clear_cache