WPScan

Admin Safety Guard < 1.4.0 - Unauthenticated User Data Disclosure via 2fa/app/users REST Route

WP Directory Kit < 1.5.5 - Subscriber+ Contact Message and User Data Disclosure

WP Directory Kit < 1.5.5 - Subscriber+ Plugin Settings and API Key Disclosure

WP Directory Kit < 1.5.5 - Subscriber+ User and Unpublished Listing Disclosure

GeoDirectory < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint

WP Data Access < 5.5.79 - Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypass

WPC Order Tip for WooCommerce < 3.3.1 - Unauthenticated Order Data Disclosure

InfiniteWP Client < 1.13.6 - Unauthenticated Administrator Account Takeover on Multisite

Cancel Order & Request Woocommerce < 1.3.4.34 - Unauthenticated Order Content Disclosure via Reorder AJAX Actions

WP Directory Kit < 1.5.5 - Unauthenticated SQL Injection via 'field_search' Parameter