WPScan

Rank Math SEO < 1.0.277 - Author+ Non-Public Post Content Disclosure via Abilities API

Rank Math SEO < 1.0.277 - Author+ Term Metadata Update and Cross-Object Post Title Overwrite via updateMetaBulk

Rank Math SEO < 1.0.277 - Author+ Arbitrary Post and User Metadata Overwrite via updateSchemas

RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field

FormLayer < 1.0.9 - Unauthenticated Form Configuration Disclosure via Form Submission Response

CatalogX < 6.1.3 - Unauthenticated Email Content Injection via Shared Transient

Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Action

MasterStudy LMS < 3.7.46 - Subscriber+ Cross-Instructor Order Data Disclosure via author_id Parameter

MasterStudy LMS < 3.7.46 - Unauthenticated Student Enrollment Disclosure via student-courses REST Route

MasterStudy LMS < 3.7.46 - Instructor+ Quiz Answer Disclosure via IDOR