WPScan

ProfileGrid < 5.9.9.8 - Subscriber+ Arbitrary Notification Deletion via IDOR

Frontend File Manager Plugin <= 23.6 - File Metadata Update via CSRF

Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ PHP Object Injection via Event Timeline and FAQ Content

Contest Gallery < 30.0.7 - Author+ Arbitrary Post Deletion via post_cg_youtube_delete_from_library

Classified Listing < 5.4.4 - Contributor+ Unpublished Post Content Disclosure via rtcl_block_css_get_posts

Classified Listing < 5.4.4 - Contributor+ Store Revenue Total Disclosure via rtcl_revenue_order_search

Chama < 1.0.13 - Unauthenticated PHP Object Injection

Import and export users and customers < 2.4.3 - Admin+ Arbitrary File Read

SoftMarket <= 1.0.0 - Unauthenticated Account Takeover via Email Verification Bypass

TaxoPress < 3.51.0 - Contributor+ Private Post Disclosure via IDOR