WPScan

Demi - One Click Demo Import, Backup & Site Migration < 0.0.7 - Unauthenticated Sensitive Data Exposure via Public Backup Directory

FlxWoo < 3.1.1 - Unauthenticated Payment Bypass

Lightbox with PhotoSwipe < 5.9.0 - Author+ Stored XSS via data-lbwps-caption Attribute

Events Made Easy < 3.1.4 - Unauthenticated Person Data Modification via IDOR

Paid Member Subscriptions < 3.0.7 - Subscriber+ Payment Data Disclosure via IDOR

Paid Member Subscriptions < 3.0.7 - Unauthenticated Sensitive Information Exposure via Residual Export Files

FluentCart < 1.5.3 - Unauthenticated Order PII Disclosure via Print Routes

JS Help Desk < 3.1.4 - Subscriber+ Ticket Reply Modification via IDOR

Remote API <= 0.2 - Unauthenticated PHP Object Injection via remote-api Query Parameter

Bit Form < 3.1.2 - Unauthenticated Inactive Form Submission