WPScan

Joli Table Of Contents < 3.0.3 - Author+ Stored XSS via joli-toc Shortcode Theme Attribute

Real Estate Papi <= 1.0.5 - Subscriber+ Plugin Installation

SureCart < 4.6.3 - Subscriber+ Administrator Account Takeover

SureCart < 4.7.0 - Unauthenticated Account Creation with Automatic Login

Bold Page Builder < 5.9.9 - Contributor+ Stored XSS via Slider Elements' additional_settings

Kirki 6.2.1 - 6.2.5 - Unauthenticated Stored XSS via HTML Entity Decoding

B2BKing < 5.2.40 - Unauthenticated B2B Group Assignment and Approval Bypass via Registration Role Selection

JetFormBuilder < 3.6.5.2 - Unauthenticated Arbitrary Shortcode Execution via 'status' Parameter

JetFormBuilder < 3.6.5.2 - Unauthenticated Email Header Injection via Send Email Action

Redirection for Contact Form 7 2.2.7 - 3.2.10 - Unauthenticated Arbitrary Shortcode Execution via Action Setting Mail-Tags