WPScan

Viral Signup <= 2.1 - Unauthenticated SQLi

TrueBooker < 1.0.3 - Settings Update via CSRF

TrueBooker < 1.0.3 - Multiple Unauthenticated SQLi

EventON < 2.2.17 - Admin+ Stored XSS

Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS

Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS

Giveaways and Contests by RafflePress < 1.12.16 - Editor+ Stored XSS

Gutenberg Blocks with AI by Kadence WP < 3.2.39 - Contributor+ Stored XSS

Quiz and Survey Master (QSM) < 9.1.1 - Contributor+ Stored XSS

WP MultiTasking <= 0.1.12 - Permalink Suffix Update via CSRF