WPScan

HT Mega 3.2.0 - 3.2.5 - Contributor+ Stored XSS via Section Headline Tag

Login with QR <= 1.0.0 - Unauthenticated Authentication Bypass via 'autologin_code' Parameter

The Pressengine <= 1.0 - Unauthenticated Authentication Bypass

Private Feed Key <= 0.1 - Unauthenticated Authentication Bypass via 'feedkey' Parameter

LearnPress 4.4.3 - 4.4.6 - Unauthenticated Quiz Answer Disclosure via check-answer REST Endpoint

UpsellWP < 2.2.10 - Unauthenticated Price Manipulation via Frequently Bought Together

WPLP Cookie Consent < 4.4.4 - Unauthenticated Stored XSS via Consent Logs

Choose User Role at Registration for WooCommerce < 1.3.3 - Unauthenticated Privilege Escalation via Registration Role Request

VikBooking 1.8.8 - 1.8.14 - Unauthenticated Stored XSS via SVG Chat Attachment

Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Registration Policy Bypass via Login Form Type Confusion