WPScan

EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure

EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS

Voting Record <= 2.0 - Subscriber+ Stored XSS

WP Customer Area < 8.2.1 - Subscriber+ Account Address Update

FastDup – Fastest WordPress Migration & Duplicator < 2.2 - Directory Listing to Account Takeover and Sensitive Data Exposure

EventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site Scripting

Staff / Employee Business Directory for Active Directory < 1.2.3 - Improper escaping of LDAP entries

All in One B2B for WooCommerce <= 1.0.3 - Unauthenticated Privilege Escalation

My Account Page Editor < 1.3.2 - Subscriber+ Arbitrary File Upload

T1 theme <= 19.0 - Open Redirect