WPScan

SAML Single Sign On < 6.0.0 - Unauthenticated Privilege Escalation via Account Matching

NextGEN Gallery < 4.5.0 - Authenticated Plugin Image Settings Update

NextGEN Gallery < 4.5.0 - Authenticated Arbitrary Gallery Image Deletion via IDOR

NextGEN Gallery < 4.5.0 - Contributor+ Image Metadata Disclosure via IDOR

NextGEN Gallery < 4.5.0 - Authenticated Cross-Gallery Settings Modification via IDOR

NextGEN Gallery < 4.5.0 - Authenticated Arbitrary File Upload via ZIP Import

Estatik < 4.3.5 - Reflected XSS via get_listings hash Parameter

WP Import Export Lite < 3.9.35 - Authenticated Privilege Escalation via User Import

JetFormBuilder 3.5.6.2 - 3.6.5.2 - Admin+ Arbitrary File Deletion via Server-Side Validation Callback

Nimble Builder <= 3.3.8 - Subscriber+ Non-Public Content Disclosure via sek_get_nimble_content_for_seo_plugins