WPScan

File Provider <= 1.2.3 - Unauthenticated SQLi

Post Slider and Carousel with Widget < 3.2.10 - Admin+ Stored XSS

WordPress Gearside Developer Dashboard <= 1.0.72 - Reflected XSS

Stop User Enumeration < 1.7.3 - Protection Bypass

CSV Mass Importer <= 1.2 - Admin+ Arbitrary File Upload

Blog2Social: Social Media Auto Post & Scheduler < 8.4.0 - Contributor+ Stored XSS

Digits < 8.4.6.1 - Auth Bypass via OTP Bruteforcing

WP-Optimize < 4.2.0 - Admin+ SQLi

WP Lightbox 2 < 3.0.6.8 - Unauthenticated Stored XSS

Responsive Lightbox & Gallery < 2.5.1 - Contributor+ Stored XSS