WPScan

GTranslate < 5.0.1 - Unauthenticated Arbitrary Shortcode Execution via Email Translation

Ninja Tables < 5.2.17 - Unauthenticated Arbitrary Shortcode Execution via Fluent Forms Data Source

Forminator Forms < 1.57.2.1 - Unauthenticated Poll Vote Limit Bypass via IP Spoofing

Forminator Forms < 1.57.2.1 - Unauthenticated Post Meta Injection on Submitted Posts

MPCX Lightbox 1.2.2 - 1.2.5 - Unauthenticated Non-Public Post Content Disclosure

Paymob for WooCommerce < 4.1.14 - Unauthenticated Payment Bypass via Unverified Subscription Transaction Callback

Paid Member Subscriptions < 3.1.0 - Unauthenticated reCAPTCHA Bypass via Registration Form

Text Styler <= 1.1.1 - Contributor+ Stored XSS

Ninja Forms 3.15.3 - Unauthenticated Stored XSS via Paragraph Text Field in Submissions Admin

Ninja Forms 3.15.3 - Unauthenticated PHP Object Injection via CSV Export