WPScan

Advanced Classifieds & Directory Pro < 3.4.3 - Unauthenticated Non-Public Listing Custom Field Disclosure

CheckView < 2.3.2 - Administrator Account Creation via REST API Authentication Bypass

FoodBoxBooker < 1.0.8 - Subscriber+ Arbitrary User Profile Update

s2Member < 260805 - Contributor+ Stored XSS via Shortcode

Autopay / Blue Media for WooCommerce < 5.0.1 - Unauthenticated Stored XSS via CSS Editor

Vitepos < 3.6.0 - Admin+ SQL Injection via product-details-report

Vitepos < 3.6.0 - Outlet Manager+ Privilege Escalation

Bit Assist < 1.8.2 - Unauthenticated Arbitrary File Upload via Response Endpoint

YMC Filter < 3.12.8 - Contributor+ Stored XSS via Layout Builder Schema

WP Statistics < 14.16.10 - Subscriber+ Sensitive Data Disclosure via Metabox AJAX Handlers