WPScan

Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form

Simply Schedule Appointments < 1.6.12.11 - Contributor+ Sensitive Data Disclosure via Admin Shortcode

Academy LMS < 3.8.3 - Subscriber+ Arbitrary Lesson Content Disclosure via lessons REST Endpoint

ProfileGrid < 6.0.0.0 - Subscriber+ Group Join Request Disclosure via pm_get_all_requests_from_group

Clearfy < 2.4.3 - Admin+ PHP Object Injection via Settings Import

Chama < 1.0.13 - Unauthenticated Arbitrary User Password Reset

LogMyTrip <= 1.9 - Unauthenticated SQL Injection via 'tid' Cookie

GeekyBot < 1.2.8 - Unauthenticated Sensitive Information Exposure via Chat History

JS Help Desk < 3.1.4 - Contributor+ User Email Disclosure

JS Help Desk < 3.1.4 - Unauthenticated Arbitrary Ticket File Attachment Upload