WPScan

MStore API < 4.21.1 - Subscriber+ Arbitrary Order Completion

MStore API < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass via Wallet

CatFolders Document Gallery Pro < 2.0.7 - Unauthenticated Missing Authorization via download-all

Profile Builder < 4.0.1 - Contributor+ Stored XSS via Format Date Shortcode

Profile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/Export

Profile Builder < 4.0.1 - Unauthenticated Unpublished Content and Media Modification via Front-End Upload Auth Bypass

BookingPress 1.5.6 - 1.6.2 - Unauthenticated Booking Price Manipulation via PayPal Payment Confirmation

HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated BigBlueButton API Secret Disclosure

HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Plugin Settings Update

HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Moderator Join URL Disclosure and Class Access Code Bypass