WPScan

Vrm 360 3D Model Viewer <= 1.2.1 - Full Path Disclosure

User Activity Log Pro < 2.3.4 - Unauthenticated Stored Cross-Site Scripting via User Agent

BSK Contact Form 7 Blacklist <= 1.0.1 - Reflected Cross-Site Scripting

Bonus for Woo < 5.8.3 - Reflected Cross-Site Scripting

Simply Excerpts <= 1.4 - Admin+ Stored XSS

User Activity Log Pro < 2.3.4 - IP Spoofing

PageLayer < 1.8.0 - Author+ Stored XSS

Forminator and Forminator Pro < 1.27.0 - Admin+ Stored Cross-Site Scripting

Easy Newsletter Signups <= 1.0.4 - Admin+ SQLi

Frontend File Manager < 22.6 - Editor+ Arbitrary File Download