WPScan

CollectChat < 2.4.4 - Admin+ XSS

Light Poll <= 1.0.0 - Polls Deletion via CSRF

WordPress File Upload < 4.24.8 - Unauthenticated Stored XSS

NinjaTeam Header Footer Custom Code < 1.2 - Admin+ Stored XSS

Master Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletion

Inline Related Posts < 3.8.0 - Admin+ Stored XSS

ImageMagick Engine < 1.7.11 - Administrator+ OS Command Injection

Search Filter Pro < 2.5.18 - Admin+ Stored XSS

CTT Expresso para WooCommerce < 3.2.13 - Admin+ Stored XSS

UsersWP < 1.2.12 - Users Information Disclosure