WPScan

Request a Quote < 2.4.1 - Admin+ Stored XSS

Pardakht Delkhah <= 2.9.8 - Form Fields Reset via CSRF

WpStickyBar <= 2.1.0 - Reflected XSS

Send email only on Reply to My Comment <= 1.0.6 - Stored XSS via CSRF

Send email only on Reply to My Comment <= 1.0.6 - Reflected XSS

PayPlus Payment Gateway < 6.6.9 - Unauthenticated SQLi

WANotifier < 2.6.1 - Admin+ Stored XSS

Filter & Grids < 2.8.33 - Unauthenticated LFI

Push Notification for Post and BuddyPress <=1.93 - Multiple Unauthenticated SQLi

Category Posts Widget (Free < 4.9.17, Pro < 4.9.13) - Admin+ Stored XSS