WPScan

Pro Like Button < 2.0 - Unauthenticated SQLi via 'postid' Parameter

WP Fusion Lite < 3.48.0 - Subscriber+ User Email Disclosure and Cross-User CRM Data Deletion

WP Fusion Lite 3.37.14 - 3.47.14 - Unauthenticated CRM Integration Settings Update

Five Star Restaurant Reviews < 2.3.14 - Reflected XSS

Payments for Hubtel < 1.0.2 - Unauthenticated Order Key Disclosure via IDOR

Payments for Hubtel < 1.0.2 - Unauthenticated Payment Confirmation Forgery via Delayed Payment Callback

Payments for Hubtel < 1.0.2 - Unauthenticated Payment Gateway Credentials Disclosure via Debug Log

Broken Link Notifier 1.3.1 - 2.0.0 - Unauthenticated SSRF via Redirect Bypass

FluentCart < 1.6.5 - Unauthenticated Guest Customer Account Takeover via Checkout Email

WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption