WPScan

Ultimate Member < 2.12.1 - Unauthenticated Privilege Escalation via Role Selection Field

Builderall for WordPress < 3.0.2 - Unauthenticated OAuth Access Token Poisoning via Public REST Routes

Clever Mega Menu for Visual Composer <= 1.0.1 - Subscriber+ Menu Item Meta Update via save_clever_menu_item

Spectra (Ultimate Addons for Gutenberg) < 2.20.0 - Contributor+ Stored CSS Injection via Block Attributes

Dataverse Integration < 2.91 - Contributor+ Server-Side Template Injection (SSTI) to Information Disclosure

Creative Mail 1.6.5 - 1.6.9 - Unauthenticated SQLi

Cancel Order & Request Woocommerce < 1.3.4.34 - Unauthenticated Order Content Disclosure via Reorder AJAX Actions

WP Directory Kit < 1.5.5 - Unauthenticated SQL Injection via 'field_search' Parameter

Login & Register Forms < 4.0.2 - Unauthenticated Registered User Email Address Disclosure via Lost Password Response

Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Code Brute Force