WPScan

Essential Real Estate < 4.4 - Subscriber+ Arbitrary File Upload

Essential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option Update

Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure

WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Download

Chart.js for WordPress <= 2023.2 - Editor+ Stored Cross-Site Scripting

Chart.js for WordPress <= 2023.2 - Editor+ Stored Cross-Site Scripting in New Chart

Slider - Ultimate Responsive Image Slider < 3.5.12 - Subscriber+ Arbitrary Post Access

WP User Profile Avatar <= 1.0.1 - Contributor+ Stored XSS

WP Custom Widget Area <= 1.2.5 - Subscriber+ Menus Creation/Deletion/Update

Quttera Web Malware Scanner < 3.4.2.1 - Directory Listing to Sensitive Data Exposure