WPScan

WP User Frontend < 4.3.10 - Unauthenticated User Email and Phone Disclosure via User Directory

Shared Files < 1.7.70 - Unauthenticated Arbitrary File Read

Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms

WCFM Marketplace < 3.8.2 - Unauthenticated Refund Request Creation on Guest Orders

Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure via IDOR

Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal

User Registration & Membership < 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDOR

User Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings

CMP - Coming Soon & Maintenance < 4.1.18 - Unauthenticated Maintenance Mode Disable via cmp_disable_comingsoon_ajax

CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Privilege Escalation via cmp_ajax_import_settings