WPScan

Social Commerce for WooCommerce <= 2.5.4 - Unauthenticated Plugin Option and Product Sync Status Update

JetFormBuilder Stripe Gateway < 1.1.0 - Unauthenticated Blind SQLi via Payment Token

Real3D Flipbook Lite < 5.4 - Author+ Stored XSS

Divi Dash < 1.0.7 - Unauthenticated Denial of Service via IP Address Spoofing

Newsletters < 4.18.1 - Unauthenticated Subscriber Record Overwrite and PII Disclosure via IDOR

Zportals < 6.4.2 - Subscriber+ Arbitrary Plugin Settings Update

Zportals < 6.4.2 - Subscriber+ User Email Disclosure

YAHMAN Add-ons < 0.9.31 - Unauthenticated Arbitrary File Upload via Blog Card Cache

Better Payment < 2.3.4 - Unauthenticated Payment Amount Manipulation

Directorist 8.5 - 8.9.4 - Subscriber+ Order and Financial Record Disclosure via REST Orders Endpoint