WPScan

DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload

Export & Import WPBakery Page Builder <= 1.0.2 - Stored XSS via CSRF

BE REST Endpoints <= 1.0.0 - Unauthenticated Stored XSS and Widget Manipulation

Masteriyo LMS < 3.4.1 - Subscriber+ PHP Object Injection

Masteriyo LMS < 3.4.1 - Instructor+ Stored XSS via Course Highlights

Masteriyo LMS 1.14.0 - 3.4.0 - Instructor+ Arbitrary Post Disclosure via IDOR

BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Taxonomy Term Modification via CSRF

BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Meta Field Configuration Update via CSRF

BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Authenticated Product Download URL and Meta Disclosure via IDOR

Album Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_action