Erwan LR (WPScan)

MStore API < 4.21.1 - Subscriber+ Arbitrary Order Completion

Newsletters < 4.17 - Arbitrary Plugin Option Update via CSRF

Newsletters < 4.17 - Unauthenticated API Access via Predictable API Key

Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Upload via Candidate Profile Mass Assignment

Shared Files < 1.7.70 - Unauthenticated Arbitrary File Read

FoodBoxBooker < 1.0.8 - Subscriber+ Arbitrary User Profile Update

Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication

Premium SEO - Unauthenticated Backdoor (Admin Creation / RCE / SSRF / Content Injection)

ECS < 4.3.10 - Contributor+ Arbitrary Post Meta Disclosure via Dynamic Repeater ACF Source

Copy & Delete Posts < 1.5.6 - Authenticated Arbitrary Post Content and Password Disclosure