WPScan

WPvivid Backup & Migration < 0.9.134 - Admin+ File Write Outside the Backup Directory via Path Traversal

WPvivid Backup & Migration < 0.9.134 - Admin+ Arbitrary File Deletion via Path Traversal

Directorist < 8.9 - Subscriber+ Arbitrary Post Meta Write via atbdp_post_attachment_upload

Xpro Elementor Addons < 1.7.8 - Unauthenticated Draft/Private Product Disclosure via Quick View

WPvivid Backup & Migration < 0.9.133 - Admin+ Arbitrary File Write via Zip Slip in Backup Restore

Simple User Registration <= 6.9 - Unauthenticated Privilege Escalation to Administrator

RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter

Amelia < 2.4.7 - Unauthenticated Notification Queue Dispatch

Total Upkeep < 1.17.3 - Unauthenticated Sensitive Data Disclosure and Forced Site Restore via Predictable cron_secret

Icegram Express < 5.8.6 - Admin+ Stored XSS