WPScan

Gutenverse News < 3.3.3 - Unauthenticated Stored XSS via Comment Content

AI Builder 2.4.1 - 2.7.7 - Contributor+ Stored XSS via Post JavaScript

Visualizer < 4.0.6 - Contributor+ Arbitrary Chart Deletion via deleteChart

Featured Image with URL < 1.0.6 - Contributor+ Stored XSS via Image Alt Text

SSL Zen < 4.7.40 - Subscriber+ TLS Private Key Disclosure

Visualizer < 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDOR

WPCafe 3.0.10 - 3.0.17 - Unauthenticated Order Disclosure and Modification via food-orders REST API

BackWPup 5.2.2 - 5.7.4 - BackWPup Jobs Checker+ Database Backup Exfiltration via Missing Authorization on Job REST Routes

Ultimate Gift Cards For WooCommerce < 3.2.10 - Unauthenticated Gift Card Value Inflation via Discounted Purchase

Ultimate Gift Cards for WooCommerce 3.0.3 - 3.2.9 - Unauthenticated Gift Card Code and Customer PII Disclosure via wps_uwgc_report_details