WPScan

Change wp-admin Login < 1.1.0 - Unauthenticated Arbitrary Settings Update

HTML2WP <= 1.0.0 - Unauthenticated Arbitrary File Upload

HTML2WP <= 1.0.0 - Subscriber+ Arbitrary File Deletion

Files Download Delay < 1.0.7 - Subscriber+ Settings Reset

WPGraphQL WooCommerce <= 0.11.0 - Unauthenticated Coupon Codes Disclosure

SP Project & Document Manager < 4.58 - Sensitive File Disclosure

Theme-Demo-Importer < 1.1.1 - Admin+ Arbitrary File Upload

Log WP_Mail <= 0.1 - Email Logs Publicly Accessible

Discy < 5.0 - Subscriber+ Broken Access Control to change settings

Content Mask < 1.8.4.1 - Subscriber+ Arbitrary Options Update