WPScan

Events Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploads

Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication

WP Data Access < 5.5.79 - Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypass

Bricksforge < 3.1.8.8 - Unauthenticated Arbitrary Password Reset via Pro Forms

Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector

Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure

Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch

MLS Import < 7.0.4 - Subscriber+ Sensitive Information Disclosure via mlsimport_logger_per_item

WordPress File Upload < 5.1.8 - Unauthenticated SQL Injection via uniqueuploadid

Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server