WPScan

BSK Contact Form 7 Blacklist <= 1.0.1 - Reflected Cross-Site Scripting

Frontend File Manager < 22.6 - Editor+ Arbitrary File Download

Easy Newsletter Signups <= 1.0.4 - Admin+ SQLi

ActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSS

Forminator and Forminator Pro < 1.27.0 - Admin+ Stored Cross-Site Scripting

PubyDoc <= 2.0.6 - Admin+ Stored XSS

WP Job Openings < 3.4.3 - Sensitive Data Exposure via Directory Listing

WPB Show Core <= 2.2 - Unauthenticated Local File Inclusion

File Manager Pro < 1.8.1 - Admin+ Stored Cross-Site Scripting

WP Post Popup <= 3.7.3 - Admin+ Stored XSS