WPScan

Price Drop Alert for WooCommerce <= 1.1 - Unauthenticated SQL Injection via product

Product Question and Answer <= 1.1.0 - Unauthenticated SQL Injection via p_id and read

Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQL Injection via week

Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQLi via tzwrs_update_cell

Easy Appointments < 4.0.2.2 - Unauthenticated Appointment Cancellation/Confirmation via Forgeable Email-Link Token

Easy Appointments 4.0 - 4.0.2.1 - Unauthenticated Arbitrary Appointment Modification and Deletion via IDOR

Really Simple Security (Free) < 9.8.3 - Unauthenticated Unbounded Option Growth via Spoofed Client IP Header

iGMS Direct Booking < 2.0 - Unauthenticated Stored XSS via Widget Settings

MasterStudy LMS 3.6.2 - < 3.7.50 - Instructor+ Student PII Disclosure via IDOR

All Bootstrap Blocks <= 1.3.31 - Contributor+ Stored XSS via areoi/button type Attribute