WPScan

Link Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb Links

Link Library < 7.9.6 - Contributor+ Path Traversal via 'filepath' Parameter

Link Library < 7.9.6 - Unauthenticated SSRF via Reciprocal Link Validation

WPForms Lite 1.8.8.2 - 2.0.1.1 - Unauthenticated Stripe Refund and Subscription Cancellation via External PaymentIntent

CMB2 < 2.13.0 - Subscriber+ Arbitrary Option Corruption via oEmbed Handler

wpForo Forum < 3.1.6 - Subscriber+ PHP Object Injection via Profile Fields

10Web Booster < 2.34.0 - Unauthenticated Connection Secret Disclosure and Deletion

Masteriyo LMS < 3.4.2 - Subscriber+ Arbitrary User Course Progress Disclosure via IDOR

Masteriyo LMS < 3.4.2 - Subscriber+ Quiz Answer Key Disclosure

The Post Grid < 7.9.5 - Contributor+ Stored HTML/iframe Injection via wp_kses_post Allow-List Widening