WPScan

JetBackup 3.1.18.8 - 3.1.23.3 - Admin+ Multisite Network Backup Download

WP OAuth Server < 6.3.1 - Unauthenticated OAuth Token and User Data Disclosure via Debug Log File

UpdraftPlus < 1.26.7 - Backup Restoration via CSRF

Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Deletion via Candidate Profile Mass Assignment

Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Read via Candidate Profile Mass Assignment

Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Upload via Candidate Profile Mass Assignment

LearnPress – Sepay Payment < 4.0.3 - Unauthenticated Order Status Disclosure

StoreGrowth: Smart Sales Booster for WooCommerce < 2.1.2 - Unauthenticated Arbitrary Price Manipulation via BOGO Add-to-Cart

Finale Lite < 2.21.0 - Subscriber+ Campaign Configuration Disclosure via wcct_quick_view_html

Notifima < 3.1.4 - Subscriber+ Stock Alert Unsubscription via IDOR