WPScan

WordPress Backup & Migration < 1.4.4 - Subscriber+ Plugin Settings Update

WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpoint

WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE

WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint

WassUp Real Time Analytics <= 1.9.4.5 - Unauthenticated Stored XSS

WP Hotel Booking < 2.0.8 - Unauthenticated SQLi

WP Hotel Booking < 2.0.8 - Subscriber+ Arbitrary Post Deletion

WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs endpoint

WP Mail Log < 1.1.3 – Incorrect Authorization in REST API Endpoints

Martins Free & Easy SEO Link buildings < 1.2.30 - Reflected XSS