WPScan

ThemeREX Addons < 2.38.5 - Unauthenticated Arbitrary File Upload

Link Whisper Free < 0.9.1 - Unauthenticated Settings and User Meta Update

LeadConnector < 3.0.22 - Unauthenticated Rest Call

WP Front User Submit < 5.0.6 - Unauthenticated Sensitive Information Exposure

Gutena Forms < 1.6.1 - Contributor+ Arbitrary Limited Options Update

Feeds for YouTube < 2.6.4 - Subscriber+ License Data Deletion

Super Stage WP <= 1.0.1 - Unauthenticated PHP Object Injection

Spam Protect for Contact Form 7 < 1.2.10 - Editor+ Remote Code Execution

Court Reservation < 1.10.9 - Event Deletion via CSRF

WP Lightbox 2 < 3.0.7 - Admin+ Stored XSS