WPScan

Optima Express 8.6.0 - 8.7.5 - Author+ Stored XSS via faq_script

Optima Express 8.5.0 - 8.7.5 - Unauthenticated Author Account Creation & Application Password Rotation via ihf_clear_cache

Malcure Malware Shield < 19.9.7 - Multisite Subsite Admin+ Arbitrary File Write and Deletion via wpmr_ajax_request

WP YouTube Lyte < 1.7.31 - Contributor+ Stored XSS via Embed Block Attributes

Verge3D <= 4.13.0 - Unauthenticated Product Download Disclosure via v3d_download_file

Mailchimp for WooCommerce < 6.3 - Unauthenticated Customer Email and Cart Disclosure via IDOR

WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Stored XSS via Feed Import

WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign Preview

WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Post Publication and Author Spoofing via Campaign Settings

WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign Run