WPScan

Import and export users and customers < 2.4.5 - Admin+ SSRF via bp_avatar

Master Slider <= 3.11.2 - Contributor+ Stored XSS via ms_slider Shortcode Attributes

Business Name Generator <= 1.3 - Admin+ Stored XSS via Button Color Setting

Yo 1.1 - 1.3.1 - Unauthenticated SQL Injection via username Parameter

Event Booking Manager for WooCommerce < 5.6.0 - Contributor+ Payment Gateway Credential Disclosure

Robokassa payment gateway for Woocommerce < 1.8.9 - Unauthenticated Payment Bypass via Forged JWT Callback

Motors < 1.4.121 - Unauthenticated Draft/Private Listing Disclosure

Master Addons for Elementor < 3.1.9 - Unauthenticated Popup Deactivation via jltma_popup_disable_expired

Realtyna Organic IDX plugin + WPL Real Estate < 5.4.2 - Reflected XSS via Location Selector Endpoint

EWWW Image Optimizer < 8.7.7 - Author+ Stored XSS via Image Class Attribute Backreference Expansion