WPScan

Bold Page Builder < 5.9.8 - Contributor+ Stored XSS via Multiple Shortcode Element Attributes

Bold Page Builder < 5.9.8 - Contributor+ Stored XSS via bt_bb_button/bt_bb_headline/bt_bb_icon URL

Greenshift < 13.2.0 - Contributor+ Stored XSS via Block Animation customProps Attribute

Greenshift < 13.2.0 - Contributor+ SSRF via get-csv-to-json REST Endpoint

AI Website Builder (GitHub build) 1.0.0 - Unauthenticated RCE via Unprotected REST Routes

Masteriyo LMS 1.18.0 - 2.3.3 - Instructor+ Stored XSS via Course Custom Fields

Music Store – WordPress eCommerce < 1.4.5 - Unauthenticated SQLi via paypal-data Handler

Accept Stripe Payments < 2.1.4 - Unauthenticated Product Substitution via IDOR

Accept Stripe Payments < 2.1.4 - Open Redirect via IPN Handler

IPGP Visitors Origin < 1.6 - Reflected XSS