WPScan

Innovs HR <= 1.0.3.4 - Employee Creation via CSRF

Side Menu Lite < 4.2.1 - Menu Deletion via CSRF

ArtPlacer Widget < 2.21.2 - Subscriber+ Arbitrary Widget Deletion

ArtPlacer Widget < 2.21.2 - Stored XSS via CSRF

Import WP < 2.13.1 - Admin+ Server-side Request Forgery

so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion

Theme My Login 2FA < 1.2 - Lack of Rate Limiting

JSON Content Importer < 1.5.4 - Reflected XSS

BestWebSoft's Like & Share < 2.74 - Unauthenticated Password Protected Post Read

The Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post Read