WPScan

Clean Login < 1.19 - Unauthenticated Account Creation with Registration Disabled

Clean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Comparison

MultiVendorX 5.0.0 - 5.0.15 - Subscriber+ Arbitrary Store Data and Ownership Overwrite via stores REST Endpoint

WP Import Export Lite < 3.9.34 - Authenticated RCE via Export Template Path Traversal

WP Import Export Lite < 3.9.33 - Authenticated RCE via Export Field PHP Function

WP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image Import

WP Import Export Lite < 3.9.33 - Authenticated Arbitrary Directory Deletion via Template Path Traversal

WP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path Traversal

WP Import Export Lite < 3.9.33 - Authenticated SQLi via Export Filter Rules

WP Import Export Lite < 3.9.33 - Authenticated SQLi via Import Options