WPScan

HTML2WP <= 1.0.0 - Subscriber+ Arbitrary File Deletion

Change wp-admin Login < 1.1.0 - Unauthenticated Arbitrary Settings Update

Files Download Delay < 1.0.7 - Subscriber+ Settings Reset

SP Project & Document Manager < 4.58 - Sensitive File Disclosure

Log WP_Mail <= 0.1 - Email Logs Publicly Accessible

Discy < 5.0 - Subscriber+ Broken Access Control to change settings

Content Mask < 1.8.4.1 - Subscriber+ Arbitrary Options Update

Flower Delivery by Florist One <= 3.7 - Admin+ Stored Cross-Site Scripting

myCred < 2.4.4 - Subscriber+ Import/Export to Email Address Disclosure

Sitemap by click5 < 1.0.36 - Unauthenticated Arbitrary Options Update