WPScan

Countdown Timer <= 1.0.5 - Contributor+ Stored XSS

WP Google Review Slider < 15.6 - Admin+ Stored XSS

Real WP Shop Lite Ajax eCommerce Shopping Cart <= 2.0.8 - Admin+ Stored XSS

Better Follow Button for Jetpack <= 8.0 - Admin+ Stored XSS

aBitGone CommentSafe <= 1.0.0 - Settings Update to Stored XSS via CSRF

WP-Reply Notify <= 1.1 - Settings Update via CSRF

Ultimate Noindex Nofollow Tool <= 1.1.2 - Settings Update via CSRF

Marketing Twitter Bot <= 1.11 - Settings Update to Stored XSS via CSRF

Ultimate Noindex Nofollow Tool II < 1.3.6 - Admin+ Stored XSS

My Sticky Bar < 2.6.8 - Admin+ Stored XSS