WPScan

Library Management System < 3.5.8 - Unauthenticated SQL Injection via book_id

EscortWP <= 3.6.2 - Content Deletion via Vendor-Authored Backdoor

LA-Studio Element Kit for Elementor < 1.6.1 - Unauthenticated Open Registration

WP Travel Engine < 6.8.1 - Subscriber+ Arbitrary Media File Move via user_profile_image

Fediverse Embeds < 1.5.8 - Unauthenticated SSRF via Media Proxy

Everest Forms < 3.5.0 - Unauthenticated Missing Authorization via Site Assistant REST Endpoints

WP Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated Support Ticket Access via Session Cookie Forgery

WP DSGVO Tools (GDPR) < 3.1.40 - Unauthenticated Sensitive Information Disclosure via Subject Access Request

Everest Forms < 3.5.0 - Unauthenticated Sensitive Information Exposure via Residual CSV Artifacts

Fediverse Embeds < 1.5.8 - Unauthenticated SSRF via Site Info Endpoint