WPScan

WooCommerce Order Status Change Notifier <= 1.1.0 - Subscriber+ Arbitrary Order Status Update

Aajoda Testimonials < 2.2.2 - Admin+ Stored XSS

Enable SVG, WebP & ICO Upload <= 1.0.3 - Author+ Stored XSS

WP Inventory Manager < 2.1.0.13 - Reflected Cross-Site Scripting

Image Optimizer by 10web < 1.0.27 - Reflected Cross-Site Scripting

Image Optimizer by 10web < 1.0.27 - Admin+ Path Traversal

NEX-Forms < 8.4 - Admin+ SQL Injection

Autoptimize < 3.1.7 - Admin+ Stored Cross-Site Scripting via Settings Import

HollerBox < 2.1.4 - Admin+ SQL Injection

File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode