WPScan

Timetable and Event Schedule by MotoPress < 2.4.16 - Contributor+ Event Disclosure via IDOR

Pure WC Variation Swatches <= 1.1.7 - Unauthenticated Settings Update

WPBookit <= 1.0.7 - Customer Deletion via CSRF

Bookingor <= 1.0.12 - Subscriber+ Category Deletion

Attention Bar <= 0.7.2.1 - Admin+ SQLi

Tax Service Electronic HDM < 1.2.1 - Unauthenticated Arbitrary SQL Execution

WavePlayer < 3.8.0 - Unauthenticated Arbitrary File Upload

Age Restriction <= 3.0.2 - Subscriber+ Privilege Escalation

Team Members Showcase < 3.5.0 - Reflected XSS

WP Google Maps < 9.0.48 - Unauthenticated Stored XSS