WPScan

WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding

Role Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File Upload

Role Based Pricing for WooCommerce < 1.6.3 - Subscriber+ PHAR Deserialization

WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi

Product Stock Manager < 1.0.5 - Subscriber+ Unauthorised AJAX Calls

Google Analyticator < 6.5.6 - Admin+ PHP Object Injection

Automatic User Roles Switcher < 1.1.2 - Subscriber+ Privilege Escalation

WPtouch < 4.3.45 - Admin+ PHP Object Injection

WPtouch < 4.3.45 - Admin+ Arbitrary File Upload

Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injection