WPScan

Enjoy Social Feed <= 6.2.2 - Unauthenticated Arbitrary Instagram Account Unlinking

Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Author+ Upload to RCE

Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Iframe Injection

Tabs Shortcode and Widget <= 1.17 - Contributor+ Stored Cross-Site Scripting

Buttons Shortcode and Widget <= 1.16 - Stored XSS via shortcode

Pz-LinkCard <= 2.5.1 - Contributor+ SSRF

Pz-LinkCard <= 2.5.1 - Admin+ Stored XSS

Pz-LinkCard <= 2.5.1 - Reflected XSS

Smart Manager < 8.28.0 - Admin+ SQL Injection

Ultimate Posts Widget < 2.3.1 - Admin+ Stored XSS