WPScan

CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Privilege Escalation via cmp_ajax_import_settings

CMP - Coming Soon & Maintenance < 4.1.18 - Unauthenticated Maintenance Mode Disable via cmp_disable_comingsoon_ajax

Shared Files < 1.7.68 - Unauthenticated Arbitrary File Deletion via Path Traversal

User Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings

User Registration & Membership < 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDOR

Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal

Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure via IDOR

WCFM Marketplace < 3.8.2 - Unauthenticated Refund Request Creation on Guest Orders

WP User Frontend < 4.3.10 - Unauthenticated User Email and Phone Disclosure via User Directory

WP User Frontend < 4.3.10 - Editor+ PHP Object Injection via AI Form Builder