WPScan

Pinpoint Booking System <= 2.9.9.7.1 - Unauthenticated Arbitrary Booking Price Manipulation

Eventin < 4.1.20 - Editor+ Local File Inclusion via speaker_template Setting

WP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_category

Ezoic < 2.23.1 - Unauthenticated Database Export via Content Export REST Routes

WPC Admin Columns < 2.3.4 - Subscriber+ Arbitrary User/Post/Term Meta Disclosure

WP Photo Album Plus < 9.2.09.002 - Subscriber+ Cross-Album File Upload via Missing Authorization

ProSolution WP Client < 2.0.9 - Subscriber+ SSRF via proSol_url_validate

ProSolution WP Client < 2.0.9 - Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog Calls

Order Sync with Zendesk for WooCommerce < 2.2.3 - Unauthenticated Customer Order Data Disclosure

Wallet System for WooCommerce < 2.7.10 - Customer+ Checkout Price Manipulation via Unvalidated Wallet Amount