WPScan

RTMKit Addons for Elementor < 2.0.9 - Author+ Site-Wide Theme Builder Template Creation and Activation

FunnelKit < 3.15.0.6 - Reflected XSS via Divi Optin Form

FunnelKit < 3.15.0.6 - Admin+ Arbitrary File Deletion via Path Traversal in Template Importer

Header Footer Builder for Elementor < 1.2.1 - Contributor+ Stored XSS via Template Import

BetterDocs < 4.5.5 - Unauthenticated Stored XSS via AI Doc Summarizer Prompt Injection

Kali Forms < 2.4.17 - Unauthenticated Media Upload

Kali Forms < 2.4.17 - Contributor+ Arbitrary Post Metadata Disclosure via IDOR

Shibboleth < 2.5.4 - Unauthenticated Administrator Account Creation via Identity Header Spoofing

Quotes Llama < 3.1.6 - Unauthenticated SQL Injection via sc Parameter

Word Count and Social Shares <= 1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal