WPScan

WPBot AI ChatBot < 8.5.2 - Admin+ Second-Order SQL Injection via qc_bot_str_fields

Multiple Page Generator Plugin – MPG < 4.1.8 - Reflected XSS via mpg_shortcode

Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution

Custom Fields Account Registration For WooCommerce < 1.4 - Unauthenticated Privilege Escalation

Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery

MainWP Child < 6.1.2 - Unauthenticated Administrator Authentication Bypass via Passwordless Site Registration

MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator

Advanced Ads – Ad Manager & AdSense < 2.0.23 - Contributor+ Stored XSS via the_ad Shortcode 'ad_args' Parameter

Document Gallery < 5.1.1 - Reflected XSS via dg_generate_gallery

Masteriyo LMS < 2.3.1 - Unauthenticated Arbitrary User Session Termination (Denial of Service)