WPScan

Security Optimizer – The All-In-One Protection Plugin < 1.6.5 - Login Access IP Allowlist Bypass via post_password

WP Hotel Booking < 2.3.3 - Unauthenticated Payment Bypass via Price Manipulation

RegistrationMagic < 6.0.9.5 - Unauthenticated Payment Bypass via Amount-Blind PayPal Verification

Five Star Restaurant Reservations < 2.7.23 - Unauthenticated Payment Bypass and Booking Confirmation via IDOR

CoCart < 4.9.0 - Unauthenticated Arbitrary Price Manipulation

Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server

GetPaid < 2.8.55 - Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification

WP Travel Engine < 6.8.2 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver and Amount Verification

WP Hotel Booking < 2.3.2 - Unauthenticated PayPal Payment Bypass

Events Made Easy < 3.1.2 - Unauthenticated Payment Bypass