WPScan

Multiple Plugins from itayamar - Supply Chain Compromise

Injection Guard < 1.2.8 - Reflected XSS via $_SERVER['REQUEST_URI']

CBX Restaurant Booking <= 1.2.1 - Plugin Reset via CSRF

WP Shopify < 1.5.4 - Reflected XSS

My Reservation System <= 2.3 - Reflected XSS

QSM < 10.2.3 - Template Creation via CSRF

Latepoint < 5.1.94 - Unauthenticated LFI

OpenStreetMap for Gutenberg and WPBakery Page Builder <= 1.2.0 - Contributor+ Stored XSS

Hostel < 1.1.5.9 - Admin+ Stored XSS

Hostel < 1.1.5.8 - Reflected XSS