WPScan

DL Yandex Metrika <= 1.2 - Admin+ Stored XSS

Grow by Tradedoubler <= 2.0.21 - Unauthenticated LFI

News Element Elementor Blog Magazine < 1.0.6 - Unauthenticated LFI

AI Engine < 2.5.1 - Admin+ RCE

Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure

HTML Forms – Simple WordPress Forms Plugin < 1.3.34 - Bulk Delete via CSRF

Slider by 10Web < 1.2.57 - Editor+ Stored XSS

NextGEN Gallery < 3.59.5 - Admin+ Stored XSS

Quiz and Survey Master (QSM) < 9.1.0 - Contributor+ Stored XSS

User Profile Builder < 3.11.8 - Unauthenticated Media Upload