WPScan

WP All Export (Free < 1.4.0, Pro < 1.8.6) - Admin+ RCE

All in One B2B for WooCommerce <= 1.0.3 - Unauthenticated Privilege Escalation

Bookly < 22.4 - Admin+ SQLi

PageLayer < 1.7.7 - Unauthenticated Stored XSS

Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload

Simple Posts Ticker < 1.1.6 - Contributor+ Stored XSS

Enable Media Replace < 4.1.3 - Author+ PHP Object Injection

kk Star Ratings < 5.4.6 - Rating Tampering via Race Condition

DoLogin Security < 3.7 - IP Spoofing

Booking Calendar < 9.7.3.1 - Unauthenticated Stored XSS