Erwan LR (WPScan)

Newsletters < 4.17 - Arbitrary Plugin Option Update via CSRF

MStore API < 4.21.1 - Subscriber+ Arbitrary Order Completion

MStore API < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass via Wallet

Profile Builder < 4.0.1 - Unauthenticated Unpublished Content and Media Modification via Front-End Upload Auth Bypass

Shared Files < 1.7.70 - Unauthenticated Arbitrary File Read

Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Upload via Candidate Profile Mass Assignment

Royal Elementor Addons < 1.7.1066 - Contributor+ Stored XSS via Image Accordion Widget Effect Settings

Copy & Delete Posts < 1.5.6 - Author+ Password-Protected Post Content Disclosure

Copy & Delete Posts < 1.5.6 - Authenticated Arbitrary Post Content and Password Disclosure

Content Protector (Passster) < 4.3.9 - Unauthenticated Protected Content Disclosure via REST Path Allowlist Bypass