WPScan

WooCommerce Subscriptions < 9.1.0 - Unauthenticated RCE via PHP Object Injection

Gift Cards For WooCommerce Pro < 4.2.10 - Unauthenticated Arbitrary File Upload

Import WP < 2.14.23 - Unauthenticated Sensitive Information Exposure via Export File Download

WP Crowdfunding < 2.2.1 - Subscriber+ Campaign Creation via Missing Authorization

WP Crowdfunding < 2.2.1 - Subscriber+ Order Data Disclosure via IDOR

KiviCare < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint

Eventin < 4.1.20 - Unauthenticated Account Creation via Waiting List Endpoint

Eventin < 4.1.20 - Contributor+ Customer PII Disclosure via REST API

Cookie Consent < 0.0.10 - Subscriber+ Consent Settings Update and Consent Log Disclosure

WPMU DEV Dashboard < 5.0.1 - Remote Code Execution via Hub Install Action