WPScan

Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery

MainWP Child < 6.1.2 - Unauthenticated Administrator Authentication Bypass via Passwordless Site Registration

MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator

Advanced Ads – Ad Manager & AdSense < 2.0.23 - Contributor+ Stored XSS via the_ad Shortcode 'ad_args' Parameter

Document Gallery < 5.1.1 - Reflected XSS via dg_generate_gallery

Masteriyo LMS < 2.3.1 - Unauthenticated Arbitrary User Session Termination (Denial of Service)

The Events Calendar < 6.16.5.1 - Unauthenticated Event Aggregator Import Status Manipulation

Simply Schedule Appointments < 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer Information

QRcode Login for WeChat <= 1.3 - Unauthenticated Account Takeover

WordPress Download Manager < 3.3.62 - Unauthorized Protected File Download via Reusable Download Key