WPScan

WP Postratings < 1.86.1 - Admin+ Stored Cross-Site Scripting

Enqueue Anything <= 1.0.1 - Subscriber+ Arbitrary Asset/Post Deletion

Simple JWT Login < 3.3.0 - Insecure Password Creation

Menu Item Visibility Control <= 0.5 - Admin+ Arbitrary PHP Code Execution

Qubely < 1.8.6 - Unauthenticated Arbitrary E-mail Sending

Passster < 3.5.5.9 - Protection Bypass & Arbitrary Post Access

WP Fastest Cache < 0.9.5 - CSRF to Stored Cross-Site Scripting

WP Fastest Cache < 0.9.5 - Subscriber+ SQL Injection

Passster < 3.5.5.8 - Contributor+ Stored Cross-Site Scripting

NEX-Forms < 8.4.3 - Stored Cross-Site Scripting via CSRF