WPScan

Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing

Shared Files < 1.7.68 - Unauthenticated Arbitrary File Deletion via Path Traversal

Shared Files < 1.7.70 - Unauthenticated Limited File Upload

WP User Frontend < 4.3.10 - Editor+ PHP Object Injection via AI Form Builder

WP User Frontend < 4.3.10 - Unauthenticated User Email and Phone Disclosure via User Directory

Shared Files < 1.7.70 - Unauthenticated Arbitrary File Read

Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms

WCFM Marketplace < 3.8.2 - Unauthenticated Refund Request Creation on Guest Orders

Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure via IDOR

Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal