WPScan

YayCurrency < 3.3.5 - Unauthenticated Order and Vendor Financial Data Disclosure via Dokan Integration

Easy Media Replace <= 0.2.0 - Author+ Stored XSS via Attachment Title

User Verification <= 2.0.47 - Unauthenticated Arbitrary Account Lockout via IDOR

Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR

Quiz And Survey Master < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR

TenWeb Speed Optimizer < 2.33.5 - Unauthenticated Stored XSS via Critical CSS Token Bypass

WCFM Marketplace < 3.8.1 - Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDOR

Eventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR

Eventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOR

Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation