WPScan

Masteriyo LMS 1.14.0 - 3.4.0 - Instructor+ Arbitrary Post Disclosure via IDOR

BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Taxonomy Term Modification via CSRF

BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Meta Field Configuration Update via CSRF

BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Authenticated Product Download URL and Meta Disclosure via IDOR

Album Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_action

IDB Ecommerce (wpStoreCart 5) <= 5.0.7 - Unauthenticated PHP Object Injection via bundled wpsc-membership-pro paypal.php

WP Images Upload on Piclect <= 1.0 - Unauthenticated Arbitrary File Upload

WP Component <= 2.2.4 - Unauthenticated Privilege Escalation via Arbitrary Blog Option Update

WP Highlight Box <= 1.0 - Contributor+ Stored XSS via highlight-box Shortcode

Add User Autocomplete < 1.2 - Subscriber+ Privilege Escalation