Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 24342 vulnerabilities in 62 categories.

Critical: 1593 High: 13071 Medium: 8734 Low: 875 Information: 69
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Duplicate Page SQL Injection (3.3)
-
CWE-89
High
WordPress Plugin Duplicate Page Unspecified Vulnerability (3.5)
-
-
High
WordPress Plugin Duplicate Post Cross-Site Scripting (2.6)
-
CWE-79
High
WordPress Plugin Duplicate Post Multiple Vulnerabilities (2.5)
-
CWE-89
High
WordPress Plugin Duplicate Post SQL Injection (1.1.9)
CVE-2021-43408
CWE-89
High
WordPress Plugin Duplicate Theme Unspecified Vulnerability (0.1.4)
-
-
High
WordPress Plugin Duplicator-WordPress Migration Arbitrary File Disclosure (0.3.0)
-
CWE-22
High
WordPress Plugin Duplicator-WordPress Migration Arbitrary File Download (1.3.26)
CVE-2020-11738
CWE-538
High
WordPress Plugin Duplicator-WordPress Migration Cross-Site Request Forgery (1.1.2)
-
CWE-352
High
WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (0.4.4)
CVE-2013-4625
CWE-79
High
WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (0.5.26)
-
CWE-79
High
WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (1.2.28)
CVE-2017-16815
CWE-79
High
WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (1.2.32)
CVE-2018-7543
CWE-79
High
WordPress Plugin Duplicator-WordPress Migration Remote Code Execution (1.2.40)
-
CWE-94
High
WordPress Plugin Duplicator-WordPress Migration Security Bypass (0.5.8)
CVE-2014-9262
CWE-264
High
WordPress Plugin Duplicator-WordPress Migration SQL Injection (0.5.14)
-
CWE-89
High
WordPress Plugin Duplicator-WordPress Migration Unspecified Vulnerability (1.1.34)
-
-
High
WordPress Plugin DVS Custom Notification Multiple Cross-Site Request Forgery Vulnerabilities (1.0.1)
CVE-2012-4921
CWE-352
High
WordPress Plugin DW Mega Menu Cross-Site Request Forgery (1.0.1)
-
CWE-352
High
WordPress Plugin DW Question & Answer Cross-Site Request Forgery (1.5.7)
-
CWE-352
High
WordPress Plugin DW Question & Answer Cross-Site Scripting (1.4.2.2)
-
CWE-79
High
WordPress Plugin DW Question & Answer Multiple Unspecified Vulnerabilities (1.4.4)
-
-
High
WordPress Plugin DW Question & Answer Security Bypass (1.2.9)
-
CWE-264
High
WordPress Plugin dwnldr Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin DX Share Selection Cross-Site Request Forgery (1.4)
CVE-2022-2001
CWE-352
High
WordPress Plugin DX-Contribute Cross-Site Request Forgery (1.2.0)
-
CWE-352
High
WordPress Plugin Dynamic Content for Elementor Remote Code Execution (1.9.5.6)
CVE-2020-26596
CWE-94
High
WordPress Plugin Dynamic Featured Image Unspecified Vulnerability (1.0.3)
-
-
High
WordPress Plugin Dynamic Widgets 'id' Parameter Cross-Site Scripting (1.5.1)
-
CWE-79
High
WordPress Plugin Dynamic Widgets Multiple Cross-Site Scripting Vulnerabilities (1.5.10)
-
CWE-79
High
WordPress Plugin Dynamic Widgets Multiple Unspecified Vulnerabilities (1.5.7)
-
-
High
WordPress Plugin DZS Video Gallery Information Disclosure (3.1.3)
-
CWE-200
High
WordPress Plugin DZS Video Gallery Multiple Cross-Site Scripting Vulnerabilities (All)
CVE-2014-9094
CWE-79
High
WordPress Plugin E-Search Multiple Cross-Site Scripting Vulnerabilities (1.0)
CVE-2016-1000131
CWE-79
High
WordPress Plugin Easiest Contact Form for WordPress-AP Contact Form includes Backdoor [Only if downloaded via the vendor website] (1.0.6)
CVE-2021-24867
CWE-912
High
WordPress Plugin Easing Slider Multiple Cross-Site Scripting Vulnerabilities (2.2.0.6)
CVE-2015-1436
CWE-79
High
WordPress Plugin Easy Accept Payments for PayPal Cross-Site Scripting (4.9.9)
CVE-2023-0275
CWE-79
High
WordPress Plugin Easy Accordion-Best Accordion FAQ Cross-Site Scripting (2.0.21)
CVE-2021-24576
CWE-79
High
WordPress Plugin Easy Affiliate Links Cross-Site Scripting (3.7.0)
CVE-2023-0375
CWE-79
High
WordPress Plugin Easy Appointments Cross-Site Scripting (1.11.7)
CVE-2017-15812
CWE-79
High
WordPress Plugin Easy Appointments Cross-Site Scripting (3.11.0)
CVE-2022-4668
CWE-79
High
WordPress Plugin Easy Author Image Information Disclosure (1.5)
-
CWE-200
High
WordPress Plugin Easy Banners Cross-Site Scripting (1.4)
CVE-2014-4723
CWE-79
High
WordPress Plugin Easy Career Openings Cross-Site Scripting (0.4)
CVE-2014-4523
CWE-79
High
WordPress Plugin Easy Coming Soon Cross-Site Scripting (1.6.2)
-
CWE-79
High
WordPress Plugin Easy Coming Soon Cross-Site Scripting (1.8.1)
-
CWE-79
High
WordPress Plugin Easy Comment Uploads 'upload.php' Arbitrary File Upload (0.61)
-
CWE-434
High
WordPress Plugin Easy Contact Form Builder Cross-Site Scripting (1.0)
CVE-2016-1000152
CWE-79
High
WordPress Plugin Easy Contact Form Lite 'sort_row.request.php' SQL Injection (1.0.7)
-
CWE-89
High
WordPress Plugin Easy Contact Form Pro Cross-Site Scripting (1.1.1.8)
CVE-2021-24168
CWE-79
High
WordPress Plugin Easy Contact Form Solution Cross-Site Scripting (1.6)
CVE-2014-7240
CWE-79
High
WordPress Plugin Easy Contact Forms Export 'file' Parameter Information Disclosure (1.1.0)
-
CWE-22
High
WordPress Plugin Easy Cookies Policy Cross-Site Scripting (1.6.2)
CVE-2021-24405
CWE-79
High
WordPress Plugin Easy Custom Auto Excerpt Cross-Site Scripting (2.4.6)
CVE-2018-5311
CWE-79
High
WordPress Plugin Easy Custom Sidebars Unspecified Vulnerability (1.0.1)
-
-
High
WordPress Plugin Easy Digital Downloads Attach Accounts to Orders Cross-Site Scripting (2.0.1)
-
CWE-79
High
WordPress Plugin Easy Digital Downloads QR Code Cross-Site Scripting (1.1.0)
-
CWE-79
High
WordPress Plugin Easy Digital Downloads-htaccess Editor Cross-Site Scripting (1.0.0)
-
CWE-79
High
WordPress Plugin Easy Digital Downloads-Recent Purchases Remote File Inclusion (1.0.2)
CVE-2024-35629
CWE-98
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Cross-Site Request Forgery (2.10.2)
-
CWE-352
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Cross-Site Scripting (2.10.3)
-
CWE-79
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Cross-Site Scripting (2.11.2)
CVE-2021-39354
CWE-79
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Cross-Site Scripting (2.3.6)
-
CWE-79
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Cross-Site Scripting (2.9.15)
CVE-2019-15116
CWE-79
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Cross-Site Scripting (3.1.0.4)
CVE-2023-0380
CWE-79
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Information Disclosure (2.7.6)
-
CWE-200
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Multiple Security Bypass Vulnerabilities (2.1.10)
-
CWE-264
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Security Bypass (2.9.16)
-
CWE-264
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Security Bypass (3.1.1.4.1)
CVE-2023-30869
CWE-269
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files SQL Injection (3.1.0.3)
CVE-2023-23489
CWE-89
High
WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Unspecified Vulnerability (2.4.9)
-
-
High
WordPress Plugin Easy Event calendar Cross-Site Scripting (1.0)
CVE-2023-28169
CWE-79
High
WordPress Plugin Easy FancyBox Cross-Site Scripting (1.8.17)
CVE-2019-16524
CWE-79
High
WordPress Plugin Easy FancyBox Unspecified Vulnerability (1.3.4.9)
-
-
High
WordPress Plugin Easy Filter SQL Injection (1.5)
-
CWE-89
High