WPScan

LogMyTrip <= 1.9 - Unauthenticated SQL Injection via 'tid' Cookie

GeekyBot < 1.2.8 - Unauthenticated Sensitive Information Exposure via Chat History

JS Help Desk < 3.1.4 - Contributor+ User Email Disclosure

JS Help Desk < 3.1.4 - Unauthenticated Arbitrary Ticket File Attachment Upload

JS Help Desk – AI-Powered Support & Ticketing System < 3.1.5 - Subscriber+ Cross-User Support Ticket Disclosure via IDOR

Product Feed Manager for WooCommerce < 7.6.1 - Contributor+ SQL Injection via Feed Filter

JS Help Desk < 3.1.4 - Subscriber+ Sensitive Information Disclosure via checkAIReplyTicketsBySubject

WP Photo Album Plus < 9.2.04.003 - Subscriber+ Stored XSS via Photo Comment

Ultimate Addons for WPBakery Page Builder < 3.21.5 - Contributor+ Stored XSS via ult_buttons Shortcode

NewStatPress < 1.4.5 - Unauthenticated Stored XSS via Top Post Widget