WPScan

weMail < 2.1.3 - Reflected Cross-Site Scripting

LearnPress < 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST API

Taskbuilder < 5.0.8 - Reflected XSS via Shortcode

WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Marker ID

Advanced Google Maps < 6.1.1 - Unauthenticated Administrator Account Creation

Form Builder CP < 1.2.47 - Editor+ Stored XSS via form_structure

Agile Store Locator < 1.6.9 - Admin+ Stored XSS via logo_name

Agile Store Locator < 1.6.9 - Admin+ Arbitrary File Read via Path Traversal

WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Datatables AJAX Fallback

KeepInMind - Dashboard Notes < 0.8.4.2 - Contributor+ Stored XSS