WPScan

SupportCandy 3.2.9 - 3.5.2 - Unauthenticated Ticket Attachment Disclosure

Groundhogg < 4.7.2 - Open Redirect via 'redirect_to' Parameter

WPLP Cookie Consent < 4.4.2 - Unauthenticated IAB TCF Consent Option Update

WPLP Cookie Consent < 4.4.2 - Subscriber+ Banner Settings Overwrite and A/B Test Data Reset

Masteriyo LMS 1.3.1 - 2.3.3 - Unauthenticated Course Enrollment Disclosure

Sina Extension for Elementor 3.7.1 - 3.10.3 - Contributor+ Stored XSS via Table Widget

Quentn WP 1.2.13 - 1.2.14 - Unauthenticated SQLi via 'qntn_wp' Parameter

WPLP Cookie Consent < 4.4.2 - Subscriber+ Missing Authorization via Multiple Settings AJAX Actions

WPLP Cookie Consent 4.0.2 - 4.4.1 - Subscriber+ Cookie Scan Schedule Disclosure via gcc_get_schedule_scan

Sunshine Photo Cart < 3.7 - Unauthenticated Price Manipulation via IDOR