WPScan

Expert Invoice <= 1.0.2 -Admin+ Stored XSS

CM Email Registration Blacklist and Whitelist < 1.4.9 - Add/Delete Emails via CSRF Add and delete any item from blacklist/whitelist

Video Widget <= 1.2.3 - Admin+ Stored XSS via Widget

Inquiry Cart <= 3.4.2 - Stored XSS via CSRF

SULly < 4.3.1 - Admin+ Stored XSS

WP eMember < 10.6.6 - Admin+ Arbitrary File Upload

WP eMember < 10.6.6 - Reflected XSS

WP eMember < 10.6.6 - Bulk Delete via CSRF

WP eMember < 10.6.6 - Stored XSS in Blacklist via CSRF

WP eMember < 10.6.7 - Unauthenticated Stored XSS via Member Registration