WPScan

Welcart e-Commerce < 2.8.9 - Contributor+ Stored XSS via Shortcode

Carousel, Slider, Gallery by WP Carousel < 2.5.3 - Contributor+ Stored XSS

Tickera < 3.5.1.0 - Plugin Data Deletion via CSRF

ConvertKit < 2.0.5 - Contributor+ Stored XSS

Smash Balloon Social Post Feed < 4.1.6 - Contributor+ Stored XSS

Download Manager < 3.2.62 - Contributor+ Stored XSS

Sidebar Widgets by CodeLights <= 1.4 - Contributor+ Stored XSS

Insert Pages < 3.7.5 - Contributor+ Stored XSS

MashShare < 3.8.7 - Contributor+ Stored XSS

User Post Gallery <= 2.19 - Unauthenticated RCE