WPScan

Bible Text <= 0.2 - Contributor+ Stored XSS

SEOPress < 7.9 - Unauthenticated Object Injection

NextGEN Gallery < 3.59.3 - Admin+ Stored XSS

Responsive video embed < 0.5.1 - Contributor+ Stored XSS

PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Contributor+ Stored XSS

Bug Library < 2.1.1 - Unauthenticated RCE

PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Admin+ Stored XSS

WP QuickLaTeX < 3.8.7 - Admin+ Stored XSS in Background Color field

WP Affiliate Platform < 6.5.1 - Reflected XSS via Banner Editing

WP Affiliate Platform < 6.5.1 - Profile Update via CSRF