WPScan

MasterStudy LMS 2.3.0 - < 3.7.50 - Unauthenticated Account Creation with Registration Disabled

MasterStudy LMS 2.3.0 - < 3.7.50 - Subscriber+ Course and Lesson Creation via Demo Import

MasterStudy LMS 3.5.29 - < 3.7.50 - Contributor+ LFI via Elementor Courses Categories Widget

The Post Grid < 7.9.5 - Contributor+ Stored HTML/iframe Injection via wp_kses_post Allow-List Widening

SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via bit IPN

Masteriyo LMS < 3.4.2 - Subscriber+ Quiz Answer Key Disclosure

Masteriyo LMS < 3.4.2 - Subscriber+ Arbitrary User Course Progress Disclosure via IDOR

10Web Booster < 2.34.0 - Unauthenticated Connection Secret Disclosure and Deletion

wpForo Forum < 3.1.6 - Subscriber+ PHP Object Injection via Profile Fields

CMB2 < 2.13.0 - Subscriber+ Arbitrary Option Corruption via oEmbed Handler