WPScan

Content Protector (Passster) < 4.3.6 - Unauthenticated Protected Content Disclosure via Content-Lock Block data-content Attribute

Content Protector (Passster) < 4.3.6 - Unauthenticated Category-Locked Content Disclosure via Core REST API

Content Protector (Passster) < 4.3.6 - Unauthenticated Non-Public Post Content Disclosure via Captcha REST Endpoint

WP Directory Kit < 1.5.5 - Subscriber+ User and Unpublished Listing Disclosure

WP Directory Kit < 1.5.5 - Subscriber+ Plugin Settings and API Key Disclosure

WP Directory Kit < 1.5.5 - Subscriber+ Contact Message and User Data Disclosure

WP Directory Kit < 1.5.5 - Subscriber+ SQL Injection via data_fields_list Parameter

Orbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG Upload

Admin Safety Guard < 1.4.0 - Unauthenticated User Data Disclosure via 2fa/app/users REST Route

Dokan < 5.0.11 - Vendor+ Cross-Vendor Downloadable Product Access Grant via Order Downloads REST Endpoint