WPScan

Dewa Kirim <= 1.0.0 - Unauthenticated Stored XSS via Checkout Coordinates

Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQLi via tzwrs_update_cell

Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQL Injection via week

Product Question and Answer <= 1.1.0 - Unauthenticated SQL Injection via p_id and read

Price Drop Alert for WooCommerce <= 1.1 - Unauthenticated SQL Injection via product

WP Shortcut Link <= 1.2.0 - Unauthenticated SQL Injection via url

Newsletter < 9.3.8 - Unauthenticated Subscriber PII Disclosure and Modification via Predictable Tracking Signature Key

To Do List Member 1.4 - 1.6 - Unauthenticated Stored XSS, File Listing and Deletion via Unprotected Upload Handler

WP Ghost (Hide My WP Ghost) < 7.0.11 - Unauthenticated URL Hiding Bypass via Loopback Compatibility Check

WP Ghost (Hide My WP Ghost) 7.0.10 - Unauthenticated Firewall, Threat Detection and URL Hiding Bypass via WooCommerce Request Parameters