WPScan

NextGEN Gallery < 4.5.0 - Authenticated Plugin Image Settings Update

NextGEN Gallery < 4.5.0 - Contributor+ Image Metadata Disclosure via IDOR

NextGEN Gallery < 4.5.0 - Authenticated Cross-Gallery Settings Modification via IDOR

NextGEN Gallery < 4.5.0 - Authenticated Arbitrary File Upload via ZIP Import

Import and export users and customers < 2.4.5 - Admin+ SSRF via bp_avatar

Master Slider <= 3.11.2 - Contributor+ Stored XSS via ms_slider Shortcode Attributes

Nimble Builder <= 3.3.8 - Subscriber+ Non-Public Content Disclosure via sek_get_nimble_content_for_seo_plugins

Business Name Generator <= 1.3 - Admin+ Stored XSS via Button Color Setting

JetFormBuilder 3.5.6.2 - 3.6.5.2 - Admin+ Arbitrary File Deletion via Server-Side Validation Callback

WP Import Export Lite < 3.9.35 - Authenticated Privilege Escalation via User Import