WPScan

Quentn WP < 1.2.15 - Admin+ SQLi via 'orderby'/'order' Parameter

Quentn WP 1.2.13 - 1.2.14 - Unauthenticated SQLi via 'qntn_wp' Parameter

Sina Extension for Elementor 3.7.1 - 3.10.3 - Contributor+ Stored XSS via Table Widget

WP Express Checkout < 2.5.0 - Unauthenticated Payment Bypass via wpec_process_empty_payment

Masteriyo LMS 1.3.1 - 2.3.3 - Unauthenticated Course Enrollment Disclosure

WPLP Cookie Consent < 4.4.2 - Subscriber+ Banner Settings Overwrite and A/B Test Data Reset

WPLP Cookie Consent < 4.4.2 - Unauthenticated IAB TCF Consent Option Update

Groundhogg < 4.7.2 - Open Redirect via 'redirect_to' Parameter

SupportCandy 3.3.6 - 3.5.2 - Unauthenticated Ticket Content Disclosure via Auth Code Leak

SupportCandy 3.2.9 - 3.5.2 - Unauthenticated Ticket Attachment Disclosure