WPScan

Eventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOR

Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation

Eventin < 4.1.21 - Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR

Dinatur <= 1.18 - Unauthenticated SQL Injection via Column Name Injection

Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_ui

ECS < 4.3.8 - Unauthenticated Private Content Disclosure via ecsload

ECS < 4.3.8 - Contributor+ Stored XSS via Dynamic Repeater Bindings

Simply Schedule Appointments < 1.6.12.17 - Team Member+ User Email Disclosure via Users and Customers REST Endpoints

Product Feed PRO for WooCommerce < 13.5.7 - Unauthenticated Feed Configuration Disclosure

Backup Migration < 2.1.7 - Admin+ Privilege Escalation via Post-Restore Auto-Login