WPScan

WooCommerce < 6.6.0 - Admin+ Stored HTML Injection

Import CSV Files <= 1.0 - Reflected Cross-Site Scripting

Simple Single Sign On <= 4.1.0 - Authentication Bypass

Sensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API

iQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing

HTML2WP <= 1.0.0 - Unauthenticated Arbitrary File Upload

WPQA < 5.5 - Unauthenticated Private Message Disclosure

HTML2WP <= 1.0.0 - Subscriber+ Arbitrary File Deletion

Change wp-admin Login < 1.1.0 - Unauthenticated Arbitrary Settings Update

Files Download Delay < 1.0.7 - Subscriber+ Settings Reset