WPScan

Customer Switching for WooCommerce < 2.1.3 - Customer+ Privilege Escalation to Administrator via Insecure Operator Resolution

GiveWP < 4.16.3 - GiveWP Worker+ Stored XSS via Donation Form Template Settings

LifterLMS < 10.0.10 - Subscriber+ Sensitive Information Disclosure via select2_query_posts

Sync Post With Other Site < 1.9.3 - Contributor+ Arbitrary Page Creation/Modification

ProfileGrid < 5.9.9.8 - Unauthenticated Privilege Escalation via Unrestricted Group ID

WP Delicious < 1.10.2 - Unauthenticated Arbitrary Post Meta Update via recipe_likes

Tutor LMS < 4.0.0 - Subscriber+ Cross-Course Q&A Content Disclosure and Reply Injection

WP Real IP-based Access Control <= 1.3.1 - Unauthenticated Stored XSS via acl_ctrl_addr

LifterLMS < 10.0.10 - Instructor+ Stored XSS via Featured Pricing Information

Fluent Forms < 6.2.6 - Contributor+ Stored XSS via Date/Time Field