WPScan

RTMKit Addons for Elementor < 2.0.9 - Contributor+ Private Post Title Disclosure

LatePoint < 5.6.3 - Multiple Privileged Actions via CSRF

WP Job Portal < 2.5.5 - Subscriber+ SQL Injection via Applied Resumes 'ta' Parameter

Happy Coders OTP Login for WooCommerce < 2.8 - Unauthenticated Account Takeover via hcotp_auto_login_user

AI Engine < 3.5.5 - Subscriber+Chatbot Discussion Disclosure and Takeover via IDOR

RTMKit Addons for Elementor < 2.0.9 - Author+ Site-Wide Theme Builder Template Creation and Activation

FunnelKit < 3.15.0.6 - Reflected XSS via Divi Optin Form

FunnelKit < 3.15.0.6 - Admin+ Arbitrary File Deletion via Path Traversal in Template Importer

Header Footer Builder for Elementor < 1.2.1 - Contributor+ Stored XSS via Template Import

BetterDocs < 4.5.5 - Unauthenticated Stored XSS via AI Doc Summarizer Prompt Injection