WPScan

HTML2WP <= 1.0.0 - Unauthenticated Arbitrary File Upload

WPQA < 5.5 - Unauthenticated Private Message Disclosure

HTML2WP <= 1.0.0 - Subscriber+ Arbitrary File Deletion

Change wp-admin Login < 1.1.0 - Unauthenticated Arbitrary Settings Update

Files Download Delay < 1.0.7 - Subscriber+ Settings Reset

SP Project & Document Manager < 4.58 - Sensitive File Disclosure

Log WP_Mail <= 0.1 - Email Logs Publicly Accessible

Discy < 5.0 - Subscriber+ Broken Access Control to change settings

Content Mask < 1.8.4.1 - Subscriber+ Arbitrary Options Update

Flower Delivery by Florist One <= 3.7 - Admin+ Stored Cross-Site Scripting