WPScan

Cancel Order & Request Woocommerce < 1.3.4.34 - Unauthenticated Order Content Disclosure via Reorder AJAX Actions

WP Directory Kit < 1.5.5 - Unauthenticated SQL Injection via 'field_search' Parameter

Login & Register Forms < 4.0.2 - Unauthenticated Registered User Email Address Disclosure via Lost Password Response

Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Code Brute Force

Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Verification State Keyed on a Client-Supplied Address Header

WP Maps Pro < 6.1.3 - Unauthenticated Local File Inclusion

WP Maps Pro < 6.1.3 - Unauthenticated Denial of Service

Child Pages Card < 1.09 - Contributor+ Stored XSS via Shortcode Attributes

WPC Order Tip for WooCommerce < 3.3.1 - Unauthenticated Order Data Disclosure

FoodBoxBooker < 1.0.8 - Subscriber+ Arbitrary User Profile Update