WPScan

VikWidgetsLoader < 1.12.0 - Contributor+ Stored XSS via Gutenberg Block class_suffix

Eventin < 4.1.22 - Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation via Missing Authorization

EmbedPress 4.6.0 - 4.6.3 - Contributor+ Administrator Email Disclosure via Google Reviews REST Route

EmbedPress 4.6.0 - 4.6.3 - Contributor+ Google Reviews Modification

CatFolders Document Gallery < 2.0.7 - Author+ Stored XSS via titleTag Block Attribute

JCH Optimize < 6.0.1 - Subscriber+ Stored XSS via getcacheinfo Task Override

HT Menu < 1.2.7 - Subscriber+ Stored XSS via Menu Settings

EmbedPress 4.6.0 - 4.6.3 - Unauthenticated Google Reviews API Quota Consumption and Database Bloat

YT Player < 2.1.0 - Contributor+ SQLi via ytp_ajax

JCH Optimize 4.2.1 - 5.0.0 - Admin+ Path Traversal