WPScan

PayU CommercePro < 3.9.0 - Unauthenticated Order Tampering

Easy Appointments < 3.12.28 - Subscriber+ Customer PII Disclosure via IDOR

Media folder Addon < 4.1.7 - Unauthenticated Arbitrary File Download

Easy Appointments < 3.12.28 - Contributor+ Connection Deletion via Missing Authorization

Easy Appointments < 3.12.28 - Contributor+ Shortcode Allowlist Bypass

Easy Appointments < 3.12.28 - Subscriber+ Sensitive Information Disclosure via REST Appointments Listing

WP Maps < 4.9.7 - Subscriber+ Denial of Service

WP Maps < 4.9.7 - Subscriber+ Local File Inclusion

Estatik < 4.3.3 - Login CSRF

Ajax Search Lite < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpoint