WPScan

Serial Codes Generator and Validator with WooCommerce Support < 2.4.15 - Admin+ Stored XSS

Herd Effects < 5.2.4 - Effect Deletion via CSRF

wpDataTables < 2.1.66 - Admin+ PHP Object Injection

Vrm 360 3D Model Viewer <= 1.2.1 - Contributor+ Arbitrary File Upload Leading to RCE

Lock User Account <= 1.0.3 - Arbitrary Account Lock/Unlock via CSRF

Import XML and RSS Feeds < 2.1.4 - Admin+ Arbitrary File Upload

123.chat < 1.3.1 - Admin+ Stored XSS

Mmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory Listing

URL Shortify < 1.7.6 - Unauthenticated Stored XSS via referer header

WP Matterport Shortcode < 2.1.7 - Reflected XSS