WPScan

SureForms < 2.11.1 - Unauthenticated Payment Amount Bypass

Word Count and Social Shares <= 1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal

Library Management System < 3.5.8 - Unauthenticated SQL Injection via book_id

WP Job Portal < 2.5.5 - Subscriber+ Employer Email Disclosure via IDOR

WP Job Portal < 2.5.5 - Subscriber+ Arbitrary Job Approval, Featuring and Rejection

Tutor LMS < 3.9.13 - Subscriber+ Unauthorized Course Enrollment and Private Course Content Disclosure via Droip/Kirki Integration

Tutor LMS < 3.9.13 - Instructor+ Arbitrary Post Overwrite via IDOR

Tutor LMS < 3.9.13 - Subscriber+ Arbitrary Auto-Approved Comment Creation

Tutor LMS < 3.9.13 - Subscriber+ Arbitrary Quiz Attempt Modification via IDOR

Database for Contact Form 7, WPforms, Elementor forms < 1.5.2 - Unauthenticated PHP Object Injection via Entry File Field