WPScan

Term Pages < 2.0.0 - Unauthenticated SQL Injection via tp_lookup

Hotel Booking Lite < 6.2.3 - Subscriber+ Customer Data Modification via IDOR

Hotel Booking Lite < 6.2.3 - Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint

Customer Reviews for WooCommerce < 5.116.0 - Subscriber+ Missing Authorization via Multiple Settings AJAX Actions

Podcast Player < 8.3.1 - Unauthenticated Server-Side Request Forgery

AutoNetTV Relay < 3.0.14 - Unauthenticated Privilege Escalation via Scheduled Sync Cron

LearnPress < 4.4.4 - Instructor+ Server-Side Request Forgery via openai_apply_image_feature

CubeWP Framework <= 1.1.30 - Contributor+ Arbitrary Post and User Meta Disclosure via IDOR

Restore PayPal Standard for WooCommerce <= 3.1.0 - Payment Bypass via PDT Underpayment

Restore PayPal Standard for WooCommerce <= 3.1.0 - Payment Bypass via Unvalidated receiver_email