WPScan

Auto Featured Image < 3.9.16 - Author+ Arbitrary File Upload

WP Dark Mode < 4.0.8 - Subscriber+ Local File Inclusion

WP Private Message < 1.0.6 - Private Message Disclosure via IDOR

AnyWhere Elementor < 1.2.8 - Freemius API Key Disclosure

Loan Comparison < 1.5.2 - Reflected XSS via shortcode

Gallery Blocks with Lightbox < 3.0.8 - Subscriber+ Arbitrary Options Update

NEX-Forms < 8.4.4 - Authenticated Stored XSS

File Away <= 3.9.9.0.1 - Contributor+ Stored XSS via Shortcode

Watu Quiz < 3.3.8.3 - Admin+ Stored XSS

Watu Quiz < 3.3.8.2 - Reflected XSS