WPScan

Registrations for The Events Calendar < 2.12.4 - Unauthenticated Stored XSS

Starbox < 3.5.2 - Admin+ Stored XSS

Pocket Widget <= 0.1.3 - Admin+ Stored XSS

adstxt Plugin <= 1.0.0 - Settings Update via CSRF

Floating Contact Button < 2.8 - Admin+ Stored XSS

WP ULike < 4.7.5 - Admin+ Stored XSS via Widgets

WP ULike < 4.7.4 - Admin+ Stored XSS

Appointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSS

Appointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSS

Favicon Generator < 2.1 - Arbitrary File Deletion via CSRF