Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 24342 vulnerabilities in 62 categories.

Critical: 1593 High: 13071 Medium: 8734 Low: 875 Information: 69
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Blogtopdf Local File Inclusion (1.0.2)
CVE-2014-2383
CWE-22
High
WordPress Plugin blogVault Real-time Backup PHP Object Injection (1.44)
-
CWE-915
High
WordPress Plugin Bloom eMail Opt-In Security Bypass (1.1)
-
CWE-264
High
WordPress Plugin Blue Admin Cross-Site Request Forgery (21.06.01)
CVE-2021-24581
CWE-352
High
WordPress Plugin BLUE ORIGAMI CRM (Formerly Application Maker/APM-CRM edition) Cross-Site Scripting (1.5.15)
-
CWE-79
High
WordPress Plugin Blue Wrench Video Widget Cross-Site Request Forgery (1.0.5)
CVE-2013-6797
CWE-352
High
WordPress Plugin Blue Wrench Video Widget Cross-Site Scripting (2.1.0)
-
CWE-79
High
WordPress Plugin Blunt GA Cross-Site Scripting (4.0.0)
-
CWE-79
High
WordPress Plugin bodi0`s Bots visits counter Cross-Site Scripting (0.8.1)
-
CWE-79
High
WordPress Plugin bodi0`s Easy cache Cross-Site Scripting (0.8)
-
CWE-79
High
WordPress Plugin Bold Page Builder PHP Object Injection (3.1.5)
CVE-2021-24579
CWE-915
High
WordPress Plugin Bold Page Builder Security Bypass (2.3.1)
CVE-2019-15821
CWE-264
High
WordPress Plugin Bold Timeline Lite Cross-Site Scripting (1.1.4)
CVE-2022-4828
CWE-79
High
WordPress Plugin Bongolive SMS Cross-Site Scripting (1.0.5)
-
CWE-79
High
WordPress Plugin Book appointment online Cross-Site Scripting (1.38)
CVE-2021-24614
CWE-79
High
WordPress Plugin Booked-Appointment Booking for WordPress Security Bypass (2.2.5)
-
CWE-264
High
WordPress Plugin Booking Calendar Contact Form Cross-Site Scripting (1.0.24)
-
CWE-79
High
WordPress Plugin Booking Calendar Contact Form Multiple Vulnerabilities (1.0.2)
-
CWE-89
High
WordPress Plugin Booking Calendar Contact Form Multiple Vulnerabilities (1.0.23)
-
CWE-89
High
WordPress Plugin Booking Calendar Cross-Site Request Forgery (4.1.5)
-
CWE-352
High
WordPress Plugin Booking Calendar Cross-Site Request Forgery (9.2.1)
CVE-2022-33177
CWE-352
High
WordPress Plugin Booking Calendar Cross-Site Scripting (7.1)
CVE-2017-2151
CWE-79
High
WordPress Plugin Booking Calendar Directory Traversal (7.0)
CVE-2017-2150
CWE-22
High
WordPress Plugin Booking Calendar Local File Inclusion (7.0)
-
CWE-22
High
WordPress Plugin Booking Calendar Multiple Vulnerabilities (6.2)
-
CWE-89
High
WordPress Plugin Booking Calendar PHP Object Injection (9.1)
CVE-2022-1463
CWE-915
High
WordPress Plugin Booking Calendar SQL Injection (6.2.2)
-
CWE-89
High
WordPress Plugin Booking Calendar SQL Injection (8.4.4)
CVE-2018-20556
CWE-89
High
WordPress Plugin Booking calendar, Appointment Booking System Multiple Vulnerabilities (2.1.7)
CVE-2018-5673
CWE-352
High
WordPress Plugin Booking calendar, Appointment Booking System Security Bypass (2.2.2)
CVE-2018-10363
CWE-264
High
WordPress Plugin Booking Calendar-Appointment Booking-BookIt Security Bypass (2.3.7)
CVE-2023-2834
CWE-287
High
WordPress Plugin Booking Calendar-Appointment Booking-BookIt Unspecified Vulnerability (2.3.8)
-
-
High
WordPress Plugin Booking Calendar-Clockwork SMS Cross-Site Scripting (1.0.5)
CVE-2017-17780
CWE-79
High
WordPress Plugin Booking Multiple Vulnerabilities (2.5)
-
CWE-352
High
WordPress Plugin Booking Package-Appointment Booking Calendar System Cross-Site Scripting (1.5.10)
CVE-2021-20840
CWE-79
High
WordPress Plugin Booking Privilege Escalation (2.4)
CVE-2019-15774
CWE-264
High
WordPress Plugin Booking Ultra Pro Appointments Booking Calendar Local File Inclusion (1.1.13)
CVE-2024-38717
CWE-22
High
WordPress Plugin Booking Ultra Pro Appointments Booking Calendar Multiple Cross-Site Request Forgery Vulnerabilities (1.1.4)
CVE-2021-36855
CWE-352
High
WordPress Plugin Booking Ultra Pro Appointments Booking Calendar Multiple Cross-Site Scripting Vulnerabilities (1.0.19)
-
CWE-79
High
WordPress Plugin Booking.com Banner Creator Cross-Site Scripting (1.4.2)
CVE-2021-24646
CWE-79
High
WordPress Plugin Booking.com Banner Creator Unspecified Vulnerability (1.4.5)
-
-
High
WordPress Plugin Booking.com Product Helper Cross-Site Scripting (1.0.1)
CVE-2021-24645
CWE-79
High
WordPress Plugin Booking.com Product Helper Unspecified Vulnerability (1.0.3)
-
-
High
WordPress Plugin Bookings Cross-Site Scripting (1.8.2)
-
CWE-79
High
WordPress Plugin Bookly #1 WordPress Booking Plugin (Lite Version) Cross-Site Scripting (14.4)
CVE-2018-6891
CWE-79
High
WordPress Plugin Bookmarkify Multiple Vulnerabilities (2.9.2)
-
CWE-352
High
WordPress Plugin Bookshelf Cross-Site Scripting (2.0.4)
-
CWE-79
High
WordPress Plugin BookX Local File Inclusion (1.7)
CVE-2014-4937
CWE-22
High
WordPress Plugin Booster Elite for WooCommerce Multiple Cross-Site Request Forgery Vulnerabilities (6.0.0)
CVE-2022-4017
CWE-352
High
WordPress Plugin Booster for WooCommerce Cross-Site Scripting (5.6.1)
-
CWE-79
High
WordPress Plugin Booster for WooCommerce Cross-Site Scripting (5.6.2)
CVE-2022-4227
CWE-79
High
WordPress Plugin Booster for WooCommerce Multiple Cross-Site Request Forgery Vulnerabilities (6.0.0)
CVE-2022-4017
CWE-352
High
WordPress Plugin Booster for WooCommerce Multiple Cross-Site Scripting Vulnerabilities (5.4.8)
CVE-2021-25001
CWE-79
High
WordPress Plugin Booster for WooCommerce Multiple Vulnerabilities (5.6.6)
CVE-2022-41805
CWE-352
High
WordPress Plugin Booster for WooCommerce PHP Object Injection (3.0.1)
-
CWE-915
High
WordPress Plugin Booster for WooCommerce Security Bypass (5.4.3)
CVE-2021-34646
CWE-264
High
WordPress Plugin Booster Plus for WooCommerce Multiple Cross-Site Request Forgery Vulnerabilities (6.0.0)
CVE-2022-4017
CWE-352
High
WordPress Plugin Bootstrap Categories Gallery Cross-Site Scripting (1.0.1)
CVE-2021-24435
CWE-79
High
WordPress Plugin Bootstrap Shortcodes Cross-Site Scripting (3.4.0)
CVE-2022-4777
CWE-79
High
WordPress Plugin Boozang Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin Border Loading Bar Cross-Site Scripting (1.0.1)
CVE-2021-38338
CWE-79
High
WordPress Plugin Border Loading Bar Multiple Cross-Site Scripting Vulnerabilities (1.0)
-
CWE-79
High
WordPress Plugin BP Code Snippets Cross-Site Scripting (2.0)
CVE-2013-1808
CWE-79
High
WordPress Plugin BP Group Documents Multiple Vulnerabilities (1.2.1)
-
CWE-352
High
WordPress Plugin BP Group Documents Security Bypass (1.10)
-
CWE-264
High
WordPress Plugin BP GTM System Cross-Site Scripting (1.9.5)
-
CWE-79
High
WordPress Plugin BP Portfolio Cross-Site Scripting (1.0.2)
-
CWE-79
High
WordPress Plugin BP Profile Search PHP Object Injection (4.5.3)
-
CWE-915
High
WordPress Plugin Brafton Cross-Site Scripting (3.4.7)
CVE-2016-10973
CWE-79
High
WordPress Plugin Brandfolder-Digital Asset Management Simplified Local/Remote File Inclusion (3.0)
-
CWE-98
High
WordPress Plugin Breadcrumb NavXT Information Disclosure (6.1.0)
-
CWE-200
High
WordPress Plugin Breadcrumbs by menu Multiple Vulnerabilities (1.0.1)
CVE-2019-15865
CWE-352
High
WordPress Plugin Breeze-WordPress Cache Open Redirect (1.0.10)
-
CWE-601
High
WordPress Plugin Breezing Forms Cross-Site Scripting (1.2.7.33)
-
CWE-79
High
WordPress Plugin Breezing Forms Cross-Site Scripting (1.2.7.42)
-
CWE-79
High