WPScan

YMC Filter < 3.12.9 - Author+ Stored XSS via SVG Icon Upload

YMC Filter < 3.12.8 - Contributor+ Stored XSS via Layout Builder Schema

Bit Assist < 1.8.2 - Unauthenticated Arbitrary File Upload via Response Endpoint

REST API Log < 1.7.1 - Unauthenticated Sensitive Log Data Disclosure via Download Endpoint

Wired Impact Volunteer Management < 2.8.2 - Subscriber+ Arbitrary RSVP Removal via wivm_remove_rsvp

SM Page Duplicator <= 1.0.0 - Editor+ SQL Injection via Page Duplication

Slick Slider < 0.5.3 - Contributor+ Stored XSS via Gallery Shortcode

Simple Google Calendar Outlook Events Widget < 3.1.0 - Unauthenticated SSRF via calendar_id

Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel

Import and export users and customers < 2.4.2 - Custom Role Privilege Escalation to Administrator via CSV Import