WPScan

Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment

Eventin < 4.1.20 - Contributor+ Order Information Disclosure via IDOR

KiviCare < 4.5.2 - Patient+ Cross-Patient Bill, Invoice and Appointment Disclosure via IDOR

WP Crowdfunding < 2.2.1 - Subscriber+ Campaign Update Modification via IDOR

Link Factory - Backdoor

Ecwid by Lightspeed Ecommerce Shopping Cart < 7.0.9 - Subscriber+ Store Disconnection via 'ec_disconnect' Action

ShopEngine < 4.9.3 - Customer PII Disclosure via Forced Authentication

WP Helper Premium < 4.7.6 - Unauthenticated Order Data Disclosure and Order Manipulation via Missing Order Key Validation

Amelia < 2.4.6 - Provider+ Cross-Customer Appointment Data Disclosure via IDOR

Customer Email Verification for WooCommerce < 3.2.6 - Unauthenticated Account Takeover via Type-Juggling Authentication Bypass