WPScan

Hoo Companion 1.0.2 - Unauthenticated Stored XSS via Theme Settings Import

WP Images Upload on Piclect <= 1.0 - Unauthenticated Arbitrary File Upload

IDB Ecommerce (wpStoreCart 5) <= 5.0.7 - Unauthenticated PHP Object Injection via bundled wpsc-membership-pro paypal.php

Album Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_action

BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Authenticated Product Download URL and Meta Disclosure via IDOR

BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Meta Field Configuration Update via CSRF

BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Taxonomy Term Modification via CSRF

Custom Menu Wizard <= 3.3.1 - Contributor+ Stored XSS via Shortcode Attributes

Masteriyo LMS 1.14.0 - 3.4.0 - Instructor+ Arbitrary Post Disclosure via IDOR

Masteriyo LMS < 3.4.1 - Instructor+ Stored XSS via Course Highlights