WPScan

Custom Login Page Customizer < 2.5.4 - Unauthenticated Arbitrary Password Reset

Recipe Card Blocks < 3.4.13 - Contributor+ SQLi

Prime Listing Manager <= 1.1 - Unauthenticated Privilege Escalation

e-xact-hosted-payment <= 2.0 - Unauthenticated Arbitrary File Deletion

Nex-Forms Express WP Form Builder < 9.1.8 - Authenticated Stored XSS

Relevanssi (Free < 4.26.0, Premium < 2.29.0) - Contributor+ SQLi

Quiz Maker < 6.7.0.89 - Admin+ Stored XSS

Ultimate Post Kit < 4.0.16 – Unauthenticated Arbitrary Post Content Disclosure

AhaChat Messenger Marketing <= 1.1 - Reflected XSS

Team < 5.0.11 - Unauthenticated SQLi