WPScan

WatchMan-Site7 3.1.1 - 4.2.0 - Subscriber+ RCE via Debug Console

MultiVendorX 5.0.13 - 5.0.14 - Unauthenticated Vendor PII and Payout Data Disclosure via stores REST Endpoint

Embed HTML5 Game <= 1.3 - Unauthenticated Arbitrary File Upload

Ajaxify Comments < 3.2 - Unauthenticated HTTP Header Injection

CM HIPAA Forms < 3.2.0 - Unauthenticated Authorization Bypass

Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Reflected XSS via Pin It Share Handler

Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Contributor+ Stored XSS via Post Title

Comments – wpDiscuz < 7.6.66 - Unauthenticated Comment Disclosure via SQLi

GutenKit < 2.5.1 - Contributor+ Stored CSS Injection

JetBackup 3.1.7.9 - 3.1.23.3 - Subscriber+ Privilege Escalation via Restore Admin User Selection