WPScan

Masteriyo LMS < 3.4.1 - Subscriber+ PHP Object Injection

BE REST Endpoints <= 1.0.0 - Unauthenticated Stored XSS and Widget Manipulation

CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router

Export & Import WPBakery Page Builder <= 1.0.2 - Stored XSS via CSRF

DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload

Gpx2Graphics <= 0.3 - Arbitrary File Upload via CSRF

Yogeta WP Cloud <= 1.0 - Unauthenticated Arbitrary File Download

SAMO Forms <= 1.0.0 - Unauthenticated SQLi

User Registration & Membership < 5.2.8 - Unauthenticated Open Redirect via Login Redirect Parameters

User Registration & Membership < 5.2.8 - Author+ Privilege Escalation to Administrator