WPScan

Order Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure

Hostel < 1.1.5.9 - Admin+ Stored XSS

Hostel < 1.1.5.8 - Reflected XSS

Sharable Password Protected Posts < 1.1.1 - Unauthenticated Password Protect Post Access

WP Map Block by aBlocks < 2.0.3 - Contributor+ Stored XSS via Marker

BuddyPress Docs < 2.2.5 - Subscriber+ Arbitrary Document Read/Update

ZoomSounds < 6.05 - Unauthenticated Arbitrary File Upload

WP Lightbox 2 < 3.0.6.8 - Unauthenticated Stored XSS

Easy Contact Form Lite < 1.1.29 - Contributor+ Stored XSS

Firelight Lightbox < 2.3.16 - Contributor+ Stored XSS