WPScan

Inline Related Posts < 3.5.0 - Admin+ Stored XSS

VikBooking < 1.6.8 - Insecure Direct Object References

Salon booking system <= 9.6.5 - Editor+ Stored XSS

Website Content in Page or Post < 2024.04.09 - Contributor+ Stored Cross-Site Scripting

Salon booking system <= 9.6.5 - Settings Update via CSRF

The Ultimate Video Player For WordPress < 2.2.3 - Contributor+ Stored XSS

Float menu < 6.0.1 - Menu Deletion via CSRF

Better Comments < 1.5.6 - Subscriber+ Stored XSS

Better Comments < 1.5.6 - Admin+ Stored XSS

WPQA < 6.1.1 - Arbitrary Category and Tag Follow/Unfollow via CSRF