WPScan

WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Campaign Configuration and Log Disclosure via IDOR

WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Stored XSS via Word to Category

Events Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDOR

Events Manager 7.4.1 - 7.4.4 - Subscriber+ Unpublished Event and Location Disclosure via 'owner' Parameter

SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via bit IPN

WebTotem Backups < 1.1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal

Social Commerce for WooCommerce <= 2.5.4 - Unauthenticated Plugin Option and Product Sync Status Update

JetFormBuilder Stripe Gateway < 1.1.0 - Unauthenticated Blind SQLi via Payment Token

Real3D Flipbook Lite < 5.4 - Author+ Stored XSS

Divi Dash < 1.0.7 - Unauthenticated Denial of Service via IP Address Spoofing