Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 24342 vulnerabilities in 62 categories.

Critical: 1593 High: 13071 Medium: 8734 Low: 875 Information: 69
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Free Live Chat Support Cross-Site Request Forgery (1.0.11)
CVE-2022-2039
CWE-352
High
WordPress Plugin Free Responsive Post/Article Author Section for WordPress-Ultimate Author Box Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.2)
CVE-2021-24867
CWE-912
High
WordPress Plugin Free Responsive Tab For WordPress-Everest Tab Lite includes Backdoor [Only if downloaded via the vendor website] (2.0.3)
CVE-2021-24867
CWE-912
High
WordPress Plugin Free WordPress To Display Like/Dislike Comment Rating-Everest Comment Rating Lite includes Backdoor [Only if downloaded via the vendor website] (2.0.4)
CVE-2021-24867
CWE-912
High
WordPress Plugin FreeMind WP Browser Cross-Site Request Forgery (1.2)
CVE-2022-2443
CWE-352
High
WordPress Plugin Freetobook review widget Unspecified Vulnerability (1.0)
-
-
High
WordPress Plugin freetobook widget Unspecified Vulnerability (1.0.5)
-
-
High
WordPress Plugin FreshMail For WordPress Multiple SQL Injection Vulnerabilities (1.5.8)
-
CWE-89
High
WordPress Plugin Front End Upload 'upload.php' Arbitrary File Upload (0.5.3)
-
CWE-434
High
WordPress Plugin Front End Upload Arbitrary File Upload (0.5.4.4)
-
CWE-434
High
WordPress Plugin Front File Manager 'upload.php' Arbitrary File Upload (0.1)
-
CWE-434
High
WordPress Plugin Front-end Editor 'upload.php' Arbitrary File Upload (2.2.1)
-
CWE-434
High
WordPress Plugin Front-End Only Users Cross-Site Scripting (3.1.10)
-
CWE-79
High
WordPress Plugin Frontend File Manager Arbitrary File Upload (1.8)
-
CWE-434
High
WordPress Plugin Frontend File Manager Arbitrary File Upload (3.3)
CVE-2014-5324
CWE-94
High
WordPress Plugin Frontend File Manager Arbitrary File Upload (3.7)
-
CWE-434
High
WordPress Plugin Frontend File Manager Arbitrary File Upload (3.9)
-
CWE-434
High
WordPress Plugin Frontend File Manager Cross-Site Request Forgery (21.3)
CVE-2022-3126
CWE-352
High
WordPress Plugin Frontend File Manager Multiple Vulnerabilities (18.2)
-
CWE-434
High
WordPress Plugin Frontend File Manager Multiple Vulnerabilities (21.2)
CVE-2022-3125
CWE-862
High
WordPress Plugin Frontend Post WordPress-AccessPress Anonymous Post includes Backdoor [Only if downloaded via the vendor website] (2.8.0)
CVE-2021-24867
CWE-912
High
WordPress Plugin Frontend Uploader Cross-Site Scripting (0.9.2)
CVE-2014-9444
CWE-79
High
WordPress Plugin Frontend Uploader Cross-Site Scripting (1.3.2)
CVE-2021-24563
CWE-79
High
WordPress Plugin Frontier Post Security Bypass (1.3.2)
-
CWE-264
High
WordPress Plugin Fuctweb CapCC 'plugins.php' SQL Injection (1.0)
-
CWE-89
High
WordPress Plugin Fudousan Cross-Site Scripting (5.7.0)
CVE-2021-20749
CWE-79
High
WordPress Plugin FunCaptcha-Anti-Spam CAPTCHA Cross-Site Request Forgery (0.3.2)
-
CWE-352
High
WordPress Plugin FunCaptcha-Anti-Spam CAPTCHA Multiple Cross-Site Scripting Vulnerabilities (0.4.3)
-
CWE-79
High
WordPress Plugin Fungif The Awesome GIFs Cross-Site Scripting (2.0)
-
CWE-79
High
WordPress Plugin Funky Penguin WP-PHPList 'unsubscribeemail' Parameter Cross-Site Scripting (2.10.2)
-
CWE-79
High
WordPress Plugin Funnel Builder by CartFlows-Create High Converting Sales Funnels For WordPress Cross-Site Request Forgery (1.5.15)
-
CWE-352
High
WordPress Plugin Funnel Builder by CartFlows-Create High Converting Sales Funnels For WordPress Cross-Site Scripting (1.6.12)
CVE-2021-24330
CWE-79
High
WordPress Plugin Funnel Builder by CartFlows-Create High Converting Sales Funnels For WordPress Privilege Escalation (1.3.0)
-
CWE-264
High
WordPress Plugin furikake Open Redirect (0.1.0)
CVE-2017-1000434
CWE-601
High
WordPress Plugin Fusion Engage Local File Disclosure (1.0.5)
-
CWE-22
High
WordPress Plugin Fusion:Extension-Gallery Multiple Unspecified Vulnerabilities (1.0.4)
-
-
High
WordPress Plugin Fusion:Extension-Map Multiple Unspecified Vulnerabilities (1.0.3)
-
-
High
WordPress Plugin Fusion:Extension-Menu Multiple Unspecified Vulnerabilities (1.0.2)
-
-
High
WordPress Plugin FV Flowplayer Video Player Cross-Site Request Forgery (7.5.30.7210)
CVE-2023-25066
CWE-352
High
WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (6.0.3.3)
-
CWE-79
High
WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (6.6.4)
CVE-2018-0642
CWE-79
High
WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (7.2.0.727)
-
CWE-79
High
WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (7.3.13.727)
CVE-2019-14799
CWE-79
High
WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (7.4.37.727)
CVE-2020-35748
CWE-79
High
WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (7.5.18.727)
CVE-2022-25613
CWE-79
High
WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (7.5.2.727)
CVE-2021-39350
CWE-79
High
WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (7.5.32.7212)
CVE-2023-30499
CWE-79
High
WordPress Plugin FV Flowplayer Video Player Multiple Vulnerabilities (7.3.14.727)
CVE-2019-14801
CWE-200
High
WordPress Plugin FV Flowplayer Video Player SQL Injection (7.3.18.727)
CVE-2019-13573
CWE-89
High
WordPress Plugin FV Flowplayer Video Player SQL Injection (7.5.15.727)
CVE-2022-25607
CWE-89
High
WordPress Plugin FV Flowplayer Video Player SQL Injection (7.5.46.7212)
CVE-2024-6338
CWE-89
High
WordPress Plugin FV Flowplayer Video Player URL Cross-Site Scripting (1.2.11)
CVE-2011-4568
CWE-79
High
WordPress Plugin G Auto-Hyperlink SQL Injection (1.0.1)
CVE-2021-24627
CWE-89
High
WordPress Plugin G-Lock Double Opt-in Manager 'ajaxbackend.php' SQL Injection (2.6.2)
-
CWE-89
High
WordPress Plugin GA Backend Tracking Cross-Site Scripting (1.2)
-
CWE-79
High
WordPress Plugin GA Google Analytics Cross-Site Scripting (20210211)
-
CWE-79
High
WordPress Plugin GA Top post for WP by Asentechllc Security Bypass (1.0)
-
CWE-264
High
WordPress Plugin GA Universal Cross-Site Request Forgery (1.0)
-
CWE-352
High
WordPress Plugin Galleries by Angie Makes Cross-Site Scripting (1.67)
CVE-2022-4795
CWE-79
High
WordPress Plugin Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery Cross-Site Scripting (2.2.0)
CVE-2021-24667
CWE-79
High
WordPress Plugin Gallery by BestWebSoft 'php.php' Arbitrary File Upload (3.06)
-
CWE-434
High
WordPress Plugin Gallery by BestWebSoft Arbitrary File Disclosure (3.8.3)
-
CWE-538
High
WordPress Plugin Gallery by BestWebSoft Cross-Site Scripting (4.2.1)
-
CWE-79
High
WordPress Plugin Gallery by BestWebSoft Cross-Site Scripting (4.4.9)
CVE-2017-2171
CWE-79
High
WordPress Plugin Gallery Categories by BestWebSoft Cross-Site Scripting (1.0.8)
CVE-2017-2171
CWE-79
High
WordPress Plugin Gallery for Social Photo Cross-Site Request Forgery (1.0.0.27)
CVE-2022-2224
CWE-352
High
WordPress Plugin Gallery for Social Photo Unspecified Vulnerability (1.0.0.25)
-
-
High
WordPress Plugin Gallery from files Multiple Vulnerabilities (1.60)
CVE-2021-24349
CWE-94
High
WordPress Plugin Gallery Master-Responsive Photo Galleries & Albums Cross-Site Scripting (1.0.22)
-
CWE-79
High
WordPress Plugin Gallery Objects SQL Injection (0.4)
CVE-2014-5201
CWE-89
High
WordPress Plugin Gallery PhotoBlocks Cross-Site Scripting (1.1.40)
-
CWE-79
High
WordPress Plugin Gallery PhotoBlocks Cross-Site Scripting (1.1.42)
CVE-2019-15829
CWE-79
High
WordPress Plugin Gallery PhotoBlocks Cross-Site Scripting (1.1.50)
-
CWE-79
High
WordPress Plugin Gallery PhotoBlocks Unspecified Vulnerability (1.1.32)
-
-
High
WordPress Plugin Gallery Plugin for WordPress-Envira Photo Gallery Cross-Site Scripting (1.7.6)
CVE-2020-9334
CWE-79
High