WPScan

WowOptin < 1.4.38 - Unauthenticated Opt-in Deactivation and Template Row Injection

Praison AI SEO < 5.0.7 - Unauthenticated Multiple Missing Authorization (Post Permalink Modification, Plugin Settings Disclosure)

Post Status Notifier Lite < 1.13.0 - Reflected XSS via mod Parameter

WP Compress < 7.10.04 - Reflected XSS via test_zone

Security Ninja (Premium) < 5.290 - Two-Factor Authentication Bypass via secnin_skip_2fa

Timetics < 1.0.57 - Unauthenticated Booking Auto-Approval via Arbitrary payment_method

Transbank Webpay < 1.14.0 - Unauthenticated Stored XSS

Product Addons – WowAddons < 1.6.15 - Unauthenticated Stored XSS via Arbitrary SVG Upload

Events Manager < 7.3.7 - Unauthenticated SQL Injection via PHP Object Injection in Booking Registration

Academy LMS < 3.8.1 - Subscriber+ Cross-User Lesson Note and Progress Modification via IDOR