WPScan

AF Companion < 2.2.0 - Shop Manager+ Arbitrary File Upload to RCE

King Addons for Elementor < 51.1.81 - Contributor+ Stored XSS via Template Catalog Import

King Addons for Elementor < 51.1.81 - Contributor+ Private Post Content Disclosure via kng_maintenance_page Shortcode

King Addons for Elementor 51.1.56 - 51.1.80 - Author+ Missing Authorization via Image Optimizer

RestroPress <= 3.4.6 - Unauthenticated Order Enumeration and Order Note Modification via Payment Recovery

Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Stored XSS via Form Type Confusion

Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Registration Policy Bypass via Login Form Type Confusion

VikBooking 1.8.8 - 1.8.14 - Unauthenticated Stored XSS via SVG Chat Attachment

UpsellWP < 2.2.10 - Unauthenticated Price Manipulation via Frequently Bought Together

WP Shortcut Link <= 1.2.0 - Unauthenticated SQL Injection via url