WPScan

Joy Of Text Lite – SMS messaging for WordPress <= 2.3.1 - Settings Update via CSRF

Secure Downloads < 1.2.3 - Admin+ Arbitrary File Download

GamiPress - Reset User <= 1.0.0 - GamiPress User Data Removal via CSRF

Download Manager <= 3.2.98 - Admin+ Stored XSS

GDPR Cookie Consent <= 2.6.0 - Bulk Delete via CSRF

GDPR Cookie Consent <= 2.6.0 - Unauthenticated Stored XSS

Simple Nav Archives <= 2.1.3 - Settings Update via CSRF

Pagelayer < 1.8.8 - Admin+ Stored XSS

Hustle < 7.8.5 - Admin+ Stored XSS

The Events Calendar < 6.6.4 - Admin+ Stored XSS