WPScan

Visualizer < 4.0.8 - Contributor+ Stored XSS via JSON Data Source

Newsletter < 9.3.7 - Unauthenticated Open Redirect and Subscriber Token Disclosure via ncu Parameter

Seraphinite Accelerator < 2.29.24 - Subscriber+ DoS via seraph_accel_State Update

Subscriptions for WooCommerce < 2.0.3 - Unauthenticated Subscription Data Disclosure via REST API Secret Key Bypass

Subscriptions for WooCommerce < 2.0.3 - Subscription Cancellation via CSRF

Rox Appointment Booking < 1.2.8 - Unauthenticated Staff PII Disclosure via Agent REST Route

Rox Appointment Booking < 1.2.8 - Unauthenticated Internal Notes Disclosure via Service and Category REST Routes

WPBot 8.7.2 - 8.7.5 - Subscriber+ Claude AI Settings Update

KBoard < 6.7 - Unauthenticated Board Media Deletion via IDOR

FluentBoards < 2.0.15 - Board Member+ Comment Author Spoofing via 'comment_by' Parameter