WPScan

Hotel Booking Lite < 4.8.5 - Unauthenticated Arbitrary File Download & Deletion

SmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post Disclosure

WP Not Login Hide <= 1.0 - Admin+ Stored XSS

POST SMTP Mailer < 2.7.1 - Unauthenticated Cross-site Scripting

Funnelforms Free < 3.4.2 - Form Deletion/Duplication via CSRF

eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF

rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE

rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE

Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object Injection

Job Manager & Career < 1.4.4 - Directory listing to Sensitive Data Exposure