WPScan

Import WP < 2.14.23 - Unauthenticated Sensitive Information Exposure via Export File Download

User Verification <= 2.0.47 - Unauthenticated Arbitrary Account Lockout via IDOR

WP Crowdfunding < 2.2.1 - Subscriber+ Campaign Creation via Missing Authorization

WP Crowdfunding < 2.2.1 - Subscriber+ Order Data Disclosure via IDOR

WP Crowdfunding < 2.2.1 - Subscriber+ Campaign Update Modification via IDOR

WooCommerce Bookings < 3.9.0 - Subscriber+ Draft Bookable Product Creation via Missing Authorization

ShopSmart Loyalty for WooCommerce <= 1.0.0 - Unauthenticated Sensitive Information Disclosure via shopsmart_check_phone

Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR

Quiz And Survey Master < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR

Link Whisper < 0.9.7 - Editor+ SQL Injection via domain Parameter