WPScan

Campaign Monitor Forms < 2.5.6 - Subscriber+ Arbitrary Options Update

Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)

PageLayer < 1.7.8 - Author+ Stored XSS

History Log by click5 < 1.0.13 - Admin+ Time-Based Blind SQL Injection

ActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSS

Track The Click < 0.3.12 - Author+ Time-Based Blind SQL Injection

WP Discord Invite < 2.5.1 - Arbitrary Settings Update via CSRF

Autocomplete Location field Contact Form 7 < 3.0 - Admin+ Store Cross-Site Scripting

Active Directory Integration < 4.1.10 - Unauthenticated Log Disclosure

Weaver Xtreme Theme Support < 6.3.1 - Admin+ PHP Object Injection