WPScan

Hoo Companion 1.0.2 - Unauthenticated Stored XSS via Theme Settings Import

YouTube Embed 10.0 - 10.3 - Unauthenticated Stored XSS via youram_server

MDJM Event Management and Mobile Events Manager - Unauthenticated Arbitrary Post Deletion

Quads Ads Manager for Google AdSense < 3.0.5 - Subscriber+ Ad-Selling Payment Bypass via Unverified Success Return URL

Social Contact Form (FormyChat) < 2.15.8 - Unauthenticated Gravity Forms Entry Disclosure via formychat_get_gf_entry

User Registration & Membership < 5.2.8 - Author+ Privilege Escalation to Administrator

User Registration & Membership < 5.2.8 - Unauthenticated Open Redirect via Login Redirect Parameters

User Registration & Membership < 5.2.8 - Subscriber+ Privilege Escalation via Membership Purchase

User Registration & Membership < 5.2.8 - Unauthenticated User Data Disclosure via Membership Thank You Page

Simple Membership < 4.7.8 - Subscriber+ Membership Level Escalation via PayPal Standard subsc_ref