WPScan

YOP Poll < 7.0.6 - Unauthenticated Vote Restriction Bypass via IP Header Spoofing

FluentBoards < 1.95.3 - Subscriber+ Cross-Board Task Disclosure via IDOR

Meta Box < 5.13.1 - Contributor+ Arbitrary Attachment Deletion via IDOR

Simple Restrict < 1.2.9 - Contributor+ Restricted Content Disclosure via REST API

Pouco Import Users <= 1.0.0 - Unauthenticated Privilege Escalation

Clever Mega Menu for Visual Composer <= 1.0.1 - Subscriber+ Menu Item Meta Update via save_clever_menu_item

Zportals < 6.3.4 - Subscriber+ Arbitrary File Upload

Event Tickets < 5.29.0.1 - Contributor+ Seating Layout and Ticket Inventory Modification via IDOR

Orbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG Upload

Content Protector (Passster) < 4.3.6 - Unauthenticated Non-Public Post Content Disclosure via Captcha REST Endpoint