WPScan

Contact Form 7 Connector < 1.2.3 - Reflected XSS

EventON (Free < 2.2.8, Premium < 4.5.6) - Unauthenticated Arbitrary Post Metadata Update

EventON (Free < 2.2.9, Premium <= 4.5.8) - Unauthenticated Virtual Event Settings Update

EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Virtual Event Password Disclosure

EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure

EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS

Community by PeepSo < 6.3.1.2 - Reflected XSS

TwitterPosts <= 1.0.2 - Settings Update via CSRF

ArtPlacer Widget < 2.21.2 - Stored XSS via CSRF

ArtPlacer Widget < 2.21.2 - Subscriber+ Arbitrary Widget Deletion