WPScan

Tutor LMS < 4.0.6 - Instructor+ Cross-Instructor Private Course Disclosure via IDOR

Customer Email Verification for WooCommerce < 3.2.6 - Unauthenticated Account Takeover via Type-Juggling Authentication Bypass

NewPath WildApricotPress Add-on – Member Directory <= 1.0.0 - Unauthenticated Member PII Disclosure via REST API

Divi 5.0 - 5.8.1 - Contributor+ Stored XSS via Social Media Follow Skype URL

WooMS <= 9.14 - Unauthenticated Server-Side Request Forgery and Sensitive Information Disclosure

KiviCare < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint

KiviCare < 4.5.2 - Patient+ Cross-Patient Bill, Invoice and Appointment Disclosure via IDOR

KiviCare < 4.5.2 - Unauthenticated Privilege Escalation via Registration

Royal Elementor Addons < 1.7.1066 - Unauthenticated Taxonomy Term Disclosure

Royal Elementor Addons < 1.7.1066 - Admin+ Remote Code Execution via Widget Builder