WPScan

Animation Addons for Elementor < 2.7.0 - Author+ Stored XSS via SVG Upload

Fluent Forms < 6.2.6 - Contributor+ Stored XSS via Date/Time Field

ShinyStat Analytics < 1.0.17 - Unauthenticated Non-Published Product Information Disclosure

Base64 Encoder/Decoder <= 0.9.2 - Stored XSS via CSRF

Base64 Encoder/Decoder <= 0.9.2 - Settings Reset via CSRF

Base64 Encoder/Decoder <= 0.9.2 - Reflected XSS

FluentCart < 1.4.0 - Subscriber+ Subscription Payment-Method Tampering via IDOR

Tablesome < 1.1.31 - Unauthenticated Post Creation and Modification

Database for Contact Form 7, WPforms, Elementor forms < 1.5.3 - Reflected XSS via form_id

Quiz And Survey Master < 11.1.5 - Contributor+ Arbitrary Template Deletion