WPScan

HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Plugin Settings Update

HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated BigBlueButton API Secret Disclosure

BookingPress 1.5.6 - 1.6.2 - Unauthenticated Booking Price Manipulation via PayPal Payment Confirmation

Customer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored XSS via 'comment' Parameter

Profile Builder < 4.0.1 - Unauthenticated Unpublished Content and Media Modification via Front-End Upload Auth Bypass

Profile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/Export

Profile Builder < 4.0.1 - Contributor+ Stored XSS via Format Date Shortcode

CatFolders Document Gallery Pro < 2.0.7 - Unauthenticated Missing Authorization via download-all

MStore API < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass via Wallet

MStore API < 4.21.1 - Subscriber+ Arbitrary Order Completion