WPScan

Meta Box < 5.13.1 - Contributor+ Arbitrary Attachment Deletion via IDOR

Simple Restrict < 1.2.9 - Contributor+ Restricted Content Disclosure via REST API

Pouco Import Users <= 1.0.0 - Unauthenticated Privilege Escalation

Clever Mega Menu for Visual Composer <= 1.0.1 - Subscriber+ Menu Item Meta Update via save_clever_menu_item

Zportals < 6.3.4 - Subscriber+ Arbitrary File Upload

Event Tickets < 5.29.0.1 - Contributor+ Seating Layout and Ticket Inventory Modification via IDOR

Orbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG Upload

Content Protector (Passster) < 4.3.6 - Unauthenticated Non-Public Post Content Disclosure via Captcha REST Endpoint

Content Protector (Passster) < 4.3.6 - Unauthenticated Category-Locked Content Disclosure via Core REST API

Content Protector (Passster) < 4.3.6 - Unauthenticated Protected Content Disclosure via Content-Lock Block data-content Attribute