WPScan

WP Ultimate CSV Importer < 9.0 - Admin+ SQLi via AIOSEO Import Fields

MasterStudy LMS < 3.7.40 - Unauthenticated Payment Bypass via PayPal IPN

MasterStudy LMS < 3.7.42 - Instructor+ Cross-Tenant Order Billing PII Disclosure via IDOR

MasterStudy LMS < 3.7.43 - Unauthenticated Open Redirect

Frontend Admin by DynamiApps < 3.29.11 - Subscriber+ Arbitrary Membership Plan Deletion

RestrictMate < 1.3.0 - Unauthenticated Privilege Escalation to Administrator

Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing

Shared Files < 1.7.68 - Unauthenticated Arbitrary File Deletion via Path Traversal

Shared Files < 1.7.70 - Unauthenticated Limited File Upload

WP User Frontend < 4.3.10 - Editor+ PHP Object Injection via AI Form Builder