WPScan

GEO My WordPress < 4.5 - Admin+ Arbitrary File Upload

RegistrationMagic < 6.0.2.1 - Stored XSS

AVIF & SVG Uploader <= 1.1.0 - Author+ Stored XSS via SVG Uplaod

Team Members Showcase < 4.4.2 - Editor+ Stored XSS

GS Logo Slider < 3.7.1 - Settings Update via Cross-Site Request Forgery

PowerPress Podcasting < 11.9.18 - Author+ XSS via Podcast URL

PowerPress Podcasting < 11.9.18 - Author+ XSS

Automation By Autonami < 3.3.0 - Unauthenticated SQLi

Maspik - Advanced Spam protection < 2.1.3 - Admin+ Stored XSS

TI WooCommerce Wishlist <= 2.8.2 - Unauthenticated SQL Injection via lang parameters