WPScan

Security Ninja (Premium) < 5.290 - Two-Factor Authentication Bypass via secnin_skip_2fa

Timetics < 1.0.57 - Unauthenticated Booking Auto-Approval via Arbitrary payment_method

Transbank Webpay < 1.14.0 - Unauthenticated Stored XSS

Product Addons – WowAddons < 1.6.15 - Unauthenticated Stored XSS via Arbitrary SVG Upload

Events Manager < 7.3.7 - Unauthenticated SQL Injection via PHP Object Injection in Booking Registration

Academy LMS < 3.8.1 - Subscriber+ Cross-User Lesson Note and Progress Modification via IDOR

Classified Listing < 5.3.9 - Subscriber+ Payment Receipt Disclosure via IDOR

Bit Form < 3.1.0 - Unauthenticated Workflow Trigger via Authentication Bypass

Bit Form < 3.1.0 - Unauthenticated Arbitrary File Read via Path Traversal

CRT Addons for Elementor < 1.6.7 - Unauthenticated Stored XSS via Contact Form