WPScan

WP Directory Kit < 1.5.7 - Unauthenticated User Email Disclosure via select_2_ajax_user

NextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected XSS via Facebook OAuth Callback

YayCurrency < 3.3.5 - Unauthenticated Order and Vendor Financial Data Disclosure via Dokan Integration

Easy Media Replace <= 0.2.0 - Author+ Stored XSS via Attachment Title

User Verification <= 2.0.47 - Unauthenticated Arbitrary Account Lockout via IDOR

Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR

Quiz And Survey Master < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR

TenWeb Speed Optimizer < 2.33.5 - Unauthenticated Stored XSS via Critical CSS Token Bypass

WCFM Marketplace < 3.8.1 - Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDOR

Eventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR