WPScan

Tutor LMS 4.0.0 - < 4.0.8 - Subscriber+ Cross-Course Lesson Comment Disclosure

Formidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' Parameter

LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter

LearnPress < 4.4.7 - Unauthenticated Question Bank Disclosure via load_content_via_ajax

LearnPress < 4.4.7 - Unauthenticated Student Enrollment Disclosure via load_content_via_ajax

LearnPress < 4.4.7 - Unauthenticated Order Data Disclosure via lp_download_order

LearnPress < 4.4.7 - Unauthenticated Unpublished Course Disclosure via REST API

Visualizer < 4.0.8 - Contributor+ Stored XSS via JSON Data Source

Newsletter < 9.3.7 - Unauthenticated Open Redirect and Subscriber Token Disclosure via ncu Parameter

Seraphinite Accelerator < 2.29.24 - Subscriber+ DoS via seraph_accel_State Update