WPScan

JetBackup 3.1.18.8 - 3.1.23.3 - Admin+ Multisite Network Backup Download

Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms

Defender Security < 6.2.0 - Admin+ Network-Wide RCE via Hub Connector on Multisite

Smush < 4.3.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite

Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing

Shared Files < 1.7.70 - Unauthenticated Arbitrary File Read

ShopApper <= 0.4.62 - Subscriber+ Arbitrary Product Stock Update

ShopApper <= 0.4.62 - Subscriber+ Customer Data Disclosure via IDOR

Document Embedder < 2.3.1 - Unauthenticated Private Document Download via Token Oracle

CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Stored XSS via niteoCS_socialmedia