WPScan

Essential Addons for Elementor - Lite < 6.6.10 - Contributor+ Stored XSS via Pricing Table Title Tag

ShinyStat Analytics < 1.0.17 - Unauthenticated Non-Published Product Information Disclosure

Streamit <= 4.5.0 - Unauthenticated Remote Code Execution via Arbitrary Function Call

Photo Swipe <= 4.1.1.1 - Author+ Stored XSS via title Attribute

UsersWP < 1.2.67 - Two-Factor Authentication Bypass

TrueBooker Appointment Booking < 1.2.4 - Unauthenticated Account Takeover via Password Reset

Event Tickets < 5.28.4 - Editor+ Stored XSS via Ticket Move

Quiz And Survey Master < 11.1.5 - Contributor+ Arbitrary Template Deletion

Database for Contact Form 7, WPforms, Elementor forms < 1.5.3 - Reflected XSS via form_id

Tablesome < 1.1.31 - Unauthenticated Post Creation and Modification