WPScan

Simple File List <= 6.3.11 - Unauthenticated Stored XSS via File Description

Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal

TabaPay Gateway <= 1.4.0 - Unauthenticated Account Takeover via Payment Callback

W3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key

SAML Single Sign On 4.8.85 - 5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite

WPS Bidouille < 1.33.5 - Subscriber+ User Email Disclosure via wps_get_users

Membership For WooCommerce < 3.1.2 - Unauthenticated Member Data Disclosure via REST Consumer Secret Bypass

KiviCare < 4.5.4 - Patient+ Arbitrary Media Attachment Read via IDOR

KiviCare < 4.5.4 - Patient+ Cross-Patient Appointment Modification via IDOR

Easy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments Listing