WPScan

Kali Forms < 2.4.17 - Unauthenticated Media Upload

Kali Forms < 2.4.17 - Contributor+ Arbitrary Post Metadata Disclosure via IDOR

Shibboleth < 2.5.4 - Unauthenticated Administrator Account Creation via Identity Header Spoofing

Quotes Llama < 3.1.6 - Unauthenticated SQL Injection via sc Parameter

Word Count and Social Shares <= 1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal

AI Engine < 3.5.5 - Editor+ Arbitrary File Write via Path Traversal

BEAF < 4.7.1 - Admin+ Stored XSS via Widget Shortcode Field

SureForms < 2.11.1 - Unauthenticated Payment Amount Bypass

Newsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field

WP 2FA < 3.1.1.2 - Account Takeover via 2FA Setup Email Binding