WPScan

Salon Booking System – Free Version <= 10.30.33 - Unauthenticated Google Calendar Connection Hijack via OAuth Callback

ProSolution WP Client < 2.0.9 - Unauthenticated SQLi and Plugin Data Deletion via 'removesite' Cookie

Block User Account < 2.0.1 - Subscriber+ Account Block Bypass via Application Passwords

RSS Aggregator by Feedzy < 5.2.6 - Author+ Cross-User Import Job Manipulation and Post Deletion

Squeeze < 1.7.12 - Author+ Arbitrary File Upload

Term Pages < 2.0.0 - Unauthenticated SQL Injection via tp_lookup

Hotel Booking Lite < 6.2.3 - Subscriber+ Customer Data Modification via IDOR

Hotel Booking Lite < 6.2.3 - Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint

Customer Reviews for WooCommerce < 5.116.0 - Subscriber+ Missing Authorization via Multiple Settings AJAX Actions

Podcast Player < 8.3.1 - Unauthenticated Server-Side Request Forgery