WPScan

WC Vendors < 2.7.2.1 - Order Shipment Status Change via CSRF

WC Vendors < 2.7.2.1 - Vendor+ Cross-Vendor Order Shipment Status Change

WC Vendors < 2.7.2.1 - Vendor+ Cross-Vendor Product and Arbitrary Post Modification via IDOR

JetStyleManager < 1.3.9 - Skin Deletion and Modification via CSRF

Theme My Login 7.0 - 7.1.15 - Subscriber+ Unauthorised Multisite Site Creation and Privilege Escalation

FAQ Builder AYS 1.6.3 - 1.8.4 - Unauthenticated Stored XSS via ays_get_user_information

Simple Ajax Chat < 20260827 - Unauthenticated Stored XSS via Chat Message Linkification

WP Fastest Cache 0.8.7.7 - 1.5.0 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters

MW WP Form < 5.1.5 - Unauthenticated Arbitrary Shortcode Execution via Completion Message Merge Tags

KiviCare – Clinic & Patient Management System (EHR) < 4.5.5 - Unauthenticated Patient Data Disclosure