WPScan

WP Ghost (Hide My WP Ghost) < 7.0.11 - Unauthenticated URL Hiding Bypass via Loopback Compatibility Check

All Bootstrap Blocks 1.3.20 - 1.3.31 - Contributor+ LFI via lightspeed Block Attributes

Clean Login < 1.19 - Unauthenticated Account Creation with Registration Disabled

Clean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Comparison

MultiVendorX 5.0.0 - 5.0.15 - Subscriber+ Arbitrary Store Data and Ownership Overwrite via stores REST Endpoint

WP Import Export Lite < 3.9.34 - Authenticated RCE via Export Template Path Traversal

WP Import Export Lite < 3.9.33 - Authenticated RCE via Export Field PHP Function

WP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image Import

WP Import Export Lite < 3.9.33 - Authenticated Arbitrary Directory Deletion via Template Path Traversal

WP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path Traversal