WPScan

BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Meta Field Configuration Update via CSRF

BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Authenticated Product Download URL and Meta Disclosure via IDOR

Album Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_action

IDB Ecommerce (wpStoreCart 5) <= 5.0.7 - Unauthenticated PHP Object Injection via bundled wpsc-membership-pro paypal.php

WP Images Upload on Piclect <= 1.0 - Unauthenticated Arbitrary File Upload

WP Component <= 2.2.4 - Unauthenticated Privilege Escalation via Arbitrary Blog Option Update

WP Highlight Box <= 1.0 - Contributor+ Stored XSS via highlight-box Shortcode

Add User Autocomplete < 1.2 - Subscriber+ Privilege Escalation

Client Invoicing by Sprout Invoices < 20.8.16 - Subscriber+ Private Note Overwrite via si_edit_private_note

Zonify < 1.0.5 - Unauthenticated Account Login Token Disclosure