WPScan

Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Registration Policy Bypass via Login Form Type Confusion

VikBooking 1.8.8 - 1.8.14 - Unauthenticated Stored XSS via SVG Chat Attachment

UpsellWP < 2.2.10 - Unauthenticated Price Manipulation via Frequently Bought Together

WP Shortcut Link <= 1.2.0 - Unauthenticated SQL Injection via url

Price Drop Alert for WooCommerce <= 1.1 - Unauthenticated SQL Injection via product

Product Question and Answer <= 1.1.0 - Unauthenticated SQL Injection via p_id and read

Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQL Injection via week

Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQLi via tzwrs_update_cell

Easy Appointments < 4.0.2.2 - Unauthenticated Appointment Cancellation/Confirmation via Forgeable Email-Link Token

Easy Appointments 4.0 - 4.0.2.1 - Unauthenticated Arbitrary Appointment Modification and Deletion via IDOR