WPScan

LogDash Activity Log < 1.1.4 - Unauthenticated SQLi

EazyDocs < 2.3.6 - Unauthenticated Arbitrary Posts Deletion and Document Management

EventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site Scripting

Popup Builder < 4.2.3 - Unauthenticated Stored XSS

Hotel Booking Lite < 4.8.5 - Unauthenticated Arbitrary File Download & Deletion

Funnelforms Free < 3.4.2 - Form Deletion/Duplication via CSRF

BSK Forms Blacklist < 3.7 - Admin+ Stored Cross-Site Scripting

eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF

WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery

Save as PDF < 3.2.0 - Admin+ Stored XSS