WPScan

Frontend File Manager Plugin <= 23.6 - Subscriber+ Arbitrary Download Access via IDOR

Magic Export & Import < 1.2.0 - Unauthenticated PII Disclosure

Check & Log Email < 2.0.13 - Unauthenticated Stored XSS

SureTriggers < 1.1.23 – Unauthenticated SQLi

WP reCaptcha by WebDesignBy < 2.0 – Admin+ Stored XSS

YITH WooCommerce Wishlist < 4.13.0 - Unauthenticated Arbitrary Wishlist Renaming via IDOR

HT Mega < 3.0.7 – Unauthenticated PII Disclosure

SQL Chart Builder < 2.3.8 - Unauthenticated SQL Injection

Performance Monitor <= 1.0.6 - Unauthenticated Blind SSRF

Product Filter for WooCommerce by WBW < 3.1.3 - Unauthenticated SQLi