WPScan

Vitepos < 3.4.2 - Outlet Manager+ Privilege Escalation

MagicForm <= 0.1.3 - Unauthenticated Arbitrary File Upload to RCE

WP Magnific Popup <= 1.0 - Author+ Stored XSS via href Attribute

weMail < 2.1.3 - Reflected Cross-Site Scripting

LearnPress < 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST API

Taskbuilder < 5.0.8 - Reflected XSS via Shortcode

WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Marker ID

Advanced Google Maps < 6.1.1 - Unauthenticated Administrator Account Creation

Form Builder CP < 1.2.47 - Editor+ Stored XSS via form_structure

Agile Store Locator < 1.6.9 - Admin+ Stored XSS via logo_name