WPScan

Calculated Fields Form < 1.1.151 - Admin+ Stored Cross-Site Scripting via Dropdown Fields

Axle Demo Importer <= 1.0.3 - Author+ Arbitrary File Upload

Broadstreet < 1.51.8 - Reflected XSS

Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection

Newsletter < 8.8.5 - Admin+ Stored XSS via Form

Newsletter < 8.8.5 - Admin+ Stored XSS via Widget

Wp-Adv-Quiz <= 1.0.2 - Admin+ Stored XSS in Quiz Overview

WP Crowdfunding < 2.1.10 - Admin+ Stored XSS

Short URL <= 1.6.8 - Subscriber+ SQLi

Asgaros Forum < 2.7.1 - Unauthenticated Arbitrary File Upload