WPScan

MasterStudy LMS < 3.7.43 - Unauthenticated Open Redirect

Frontend Admin by DynamiApps < 3.29.11 - Subscriber+ Arbitrary Membership Plan Deletion

RestrictMate < 1.3.0 - Unauthenticated Privilege Escalation to Administrator

Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing

Shared Files < 1.7.68 - Unauthenticated Arbitrary File Deletion via Path Traversal

Shared Files < 1.7.70 - Unauthenticated Limited File Upload

WP User Frontend < 4.3.10 - Editor+ PHP Object Injection via AI Form Builder

WP User Frontend < 4.3.10 - Unauthenticated User Email and Phone Disclosure via User Directory

Shared Files < 1.7.70 - Unauthenticated Arbitrary File Read

Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms