WPScan

Passster < 3.5.5.8 - Contributor+ Stored Cross-Site Scripting

NEX-Forms < 8.4.3 - Stored Cross-Site Scripting via CSRF

Simple Post <= 1.1 - Authenticated Stored Cross-Site Scripting (XSS)

WooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File Inclusion

Qyrr < 0.7 - Authenticated (contributor+) Stored XSS

MF Gig Calendar < 1.2 - Reflected Cross-Site Scripting (XSS)

Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting

Simple Sort&Search <= 0.0.3 - Ccontributor+ Stored XSS

Advanced AJAX Product Filters < 1.5.4.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)

Admin Columns Free < 4.3 & Pro < 5.5.1 - Admin+ Stored XSS in Label