WPScan

TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Appointment and Payment Record Deletion via update_appointment_booked

TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Customer PII Disclosure via Multiple AJAX Actions

TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Arbitrary Appointment Status Change via update_appointment_status

TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Account Takeover via Multiple AJAX Actions

Library Management System < 3.6.7 - Subscriber+ SQL Injection via Filter Value

WP Directory Kit < 1.5.7 - Admin+ SQL Injection via section Parameter

WP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_category

WP Maps < 4.9.8 - Subscriber+ Unlimited Autoloaded Option Creation

WooCommerce Subscriptions < 9.1.0 - Unauthenticated RCE via PHP Object Injection

Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator