WPScan

Ni WooCommerce Sales Report < 4.2.0 - Unauthenticated SQLi via 'sort' Parameter

Eventin < 4.1.24 - Unauthenticated Ticket Price Rewrite via order_token

WP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL Handling

WP Import Export Lite < 3.9.33 - Contributor+ Stored DOM XSS via Custom Field Names

WP Import Export Lite < 3.9.33 - Authenticated SQLi via Import Options

WP Import Export Lite < 3.9.33 - Authenticated SQLi via Export Filter Rules

WP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path Traversal

WP Import Export Lite < 3.9.33 - Authenticated Arbitrary Directory Deletion via Template Path Traversal

WP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image Import

WP Import Export Lite < 3.9.33 - Authenticated RCE via Export Field PHP Function