WPScan

SureRank 1.6.2 - 1.10.0 - Unauthenticated Author Email Disclosure via Person Schema

SAMO Forms <= 1.0.0 - Unauthenticated SQLi

Yogeta WP Cloud <= 1.0 - Unauthenticated Arbitrary File Download

Gpx2Graphics <= 0.3 - Arbitrary File Upload via CSRF

DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload

Export & Import WPBakery Page Builder <= 1.0.2 - Stored XSS via CSRF

BE REST Endpoints <= 1.0.0 - Unauthenticated Stored XSS and Widget Manipulation

Masteriyo LMS < 3.4.1 - Subscriber+ PHP Object Injection

Masteriyo LMS < 3.4.1 - Instructor+ Stored XSS via Course Highlights

Masteriyo LMS 1.14.0 - 3.4.0 - Instructor+ Arbitrary Post Disclosure via IDOR