WPScan

WP Sessions Time Monitoring Full Automatic < 1.0.9 - Unauthenticated SQL injection

Quiz Maker < 6.4.9.5 - Unauthenticated Email Address Disclosure

GS Logo Slider Lite < 3.6.9 - Admin+ Stored XSS

Envira Gallery < 1.8.15 - Author+ Stored XSS

Starbox < 3.5.2 - Admin+ Stored XSS

Popup Maker < 1.19.1 - Admin+ Stored XSS

Opti Marketing <= 2.0.9 - Unauthenticated SQLi

TrueBooker < 1.0.3 - Settings Update via CSRF

TrueBooker < 1.0.3 - Multiple Unauthenticated SQLi

WP MultiTasking <= 0.1.12 - Reflected XSS via Shortcode