WPScan

WP Crowdfunding < 2.2.1 - Subscriber+ Campaign Update Modification via IDOR

WooCommerce Bookings < 3.9.0 - Subscriber+ Draft Bookable Product Creation via Missing Authorization

ShopSmart Loyalty for WooCommerce <= 1.0.0 - Unauthenticated Sensitive Information Disclosure via shopsmart_check_phone

Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR

Quiz And Survey Master < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR

Link Whisper < 0.9.7 - Editor+ SQL Injection via domain Parameter

WPCafe < 3.0.18 - Unauthenticated Reservation Approval Bypass via Missing Authorization

Ray Enterprise Translation <= 1.7.3 - Subscriber+ Language Addition and Deletion

Ray Enterprise Translation <= 1.7.3 - Subscriber+ Arbitrary API Token Update

Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored XSS via SVG File Upload