WPScan

ArtPlacer Widget < 2.21.2 - Subscriber+ Arbitrary Widget Deletion

ArtPlacer Widget < 2.21.2 - Stored XSS via CSRF

Import WP < 2.13.1 - Admin+ Server-side Request Forgery

so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion

Theme My Login 2FA < 1.2 - Lack of Rate Limiting

JSON Content Importer < 1.5.4 - Reflected XSS

BestWebSoft's Like & Share < 2.74 - Unauthenticated Password Protected Post Read

The Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post Read

Quiz Maker < 6.4.9.5 - Reflected Cross-Site Scripting

Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure