WPScan

ShopSmart Loyalty for WooCommerce <= 1.0.0 - Unauthenticated Sensitive Information Disclosure via shopsmart_check_phone

WooMS <= 9.14 - Unauthenticated Server-Side Request Forgery and Sensitive Information Disclosure

KiviCare < 4.5.2 - Unauthenticated Privilege Escalation via Registration

TLP Food Menu < 6.0.2 - Unauthenticated Reservation Status Modification

Embed Google Photos Album Easily <= 2.2.1 - Contributor+ Stored XSS via link Shortcode Attribute

Paymob for WooCommerce < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel Lookup

Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment

Eventin < 4.1.20 - Contributor+ Order Information Disclosure via IDOR

KiviCare < 4.5.2 - Patient+ Cross-Patient Bill, Invoice and Appointment Disclosure via IDOR

WP Crowdfunding < 2.2.1 - Subscriber+ Campaign Update Modification via IDOR