WPScan

Arvow AI SEO Writer < 1.5.4 - Unauthenticated Arbitrary Post Creation via Webhook Secret Type-Juggling

Bricksforge < 3.1.8.8 - Unauthenticated Arbitrary Password Reset via Pro Forms

Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch

Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication

WordPress File Upload < 5.1.8 - Unauthenticated SQL Injection via uniqueuploadid

WP Photo Album Plus < 9.2.07.002 - Unauthenticated Export ZIP File Deletion via delexportzips

Nexter Blocks < 5.0.2 - Contributor+ Stored CSS Injection

Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication

Solace Extra < 1.6.1 - Subscriber+ Post Meta Update via solace_update_sitebuilder_status

Slim SEO < 4.9.11 - Contributor+ Arbitrary Post Meta Disclosure