WPScan

Travelpayouts < 1.1.13 - Settings Update via CSRF

LogDash Activity Log < 1.1.4 - Unauthenticated SQLi

Allow SVG < 1.2.0 - Author+ Stored XSS via SVG

Kali Forms < 2.4.3 - Contributor+ Stored XSS

Simple Lightbox < 2.9.4 - Contributor+ Stored XSS

illi Link Party! <= 1.0 - Unauthenticated Stored XSS

illi Link Party! <= 1.0 - Settings Update via CSRF

illi Link Party! <= 1.0 - Admin+ Stored Cross-Site Scripting

illi Link Party! <= 1.0 - Unauthenticated Arbitrary Link Deletion

wp-dashboard-notes < 1.0.11 - Contributor+ Arbitrary Private Notes Update via IDOR