WPScan

Social Contact Form (FormyChat) < 2.15.8 - Unauthenticated Gravity Forms Entry Disclosure via formychat_get_gf_entry

User Registration & Membership < 5.2.8 - Author+ Privilege Escalation to Administrator

User Registration & Membership < 5.2.8 - Unauthenticated Open Redirect via Login Redirect Parameters

User Registration & Membership < 5.2.8 - Subscriber+ Privilege Escalation via Membership Purchase

User Registration & Membership < 5.2.8 - Unauthenticated User Data Disclosure via Membership Thank You Page

Simple Membership < 4.7.8 - Subscriber+ Membership Level Escalation via PayPal Standard subsc_ref

rtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Subscriber+ Arbitrary Activity Privacy Modification via IDOR

Bookit < 2.6.0.1 - Unauthenticated Appointment PII Disclosure via Availability Check

Really Simple Security < 9.8.1 - Unauthenticated 2FA Bypass via Email Provider State Demotion

Custom Menu Wizard <= 3.3.1 - Contributor+ Stored XSS via Shortcode Attributes