Erwan LR (WPScan)

Secure Custom Fields < 6.9.8 - Admin+ Stored XSS via HTML Attribute Name Injection into Field Definition

Secure Custom Fields < 6.9.8 - Contributor+ Unpublished Post Title and Status Disclosure via Relational Fields

Secure Custom Fields < 6.9.8 - Contributor+ Relationship Field Update on Arbitrary Objects via IDOR

Secure Custom Fields < 6.9.8 - Contributor+ Admin-Restricted Custom Field Update via Post Save Path

KiviCare < 4.5.4 - Patient+ Arbitrary Media Attachment Read via IDOR

KiviCare < 4.5.4 - Patient+ Cross-Patient Appointment Modification via IDOR

TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Appointment and Payment Record Deletion via update_appointment_booked

WP Directory Kit < 1.5.7 - Unauthenticated User Email Disclosure via select_2_ajax_user

Mail Mage <= 0.0.25 - Unauthenticated SQLi via 'ewp_unsubscribe' Parameter

Anti-Spam by CleanTalk < 6.91 - Unauthenticated Stored XSS via Comment Author Email