WPScan

Customer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored XSS via 'comment' Parameter

MW WP Form < 5.1.6 - Editor+ Stored XSS via Inquiry Data List

Groundhogg < 4.5.13 - Unauthenticated Stored XSS via Web Form Dropdown/Radio Field

Really Simple Security < 9.8.0 - Multisite Subsite Admin+ Arbitrary Plugin Installation via rsp_upgrade_install_plugin

Icollect <= 1.0.0 - Unauthenticated User and Term Creation via Unrestricted Method Dispatch

Super Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_tracking

Epeken All Kurir <= 2.1.4 - Unauthenticated Order Payment Confirmation Forgery

Rest Routes <= 5.5.5 - Unauthenticated SQLi via custom-tables/tables/{table_name}

Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation

SmartAIPress <= 1.2.0 - Subscriber+ Server-Side Request Forgery via smartaipress_openai_upload_and_set_featured_image