Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 24342 vulnerabilities in 62 categories.

Critical: 1593 High: 13071 Medium: 8734 Low: 875 Information: 69
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Nextend Google Connect Cross-Site Scripting (1.5.2)
CVE-2015-4557
CWE-79
High
WordPress Plugin Nextend Google Connect Unspecified Vulnerability (1.5.3)
-
-
High
WordPress Plugin Nextend Twitter Connect Cross-Site Scripting (1.5.0)
-
CWE-79
High
WordPress Plugin Nextend Twitter Connect Cross-Site Scripting (1.5.1)
CVE-2015-4557
CWE-79
High
WordPress Plugin NextGEN Gallery Sell Photo Cross-Site Scripting (1.0.4)
-
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery 'Gallery Path' Field Cross-Site Scripting (1.9.5)
-
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery 'nggallery-manage-gallery' HTML Injection (0.96)
CVE-2008-7175
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery 'swfupload.swf' Cross-Site Scripting (1.9.7)
CVE-2012-3414
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery 'xml/media-rss.php' Cross-Site Scripting (1.5.1)
CVE-2010-1186
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Arbitrary File Upload (1.9.12)
CVE-2013-3684
CWE-434
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Arbitrary File Upload (2.1.10)
-
CWE-434
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Cross-Site Scripting (2.2.10)
-
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (1.8.3)
-
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Directory Traversal (2.0.0)
-
CWE-22
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Directory Traversal (2.1.9)
-
CWE-22
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Information Disclosure (1.9.11)
CVE-2013-0291
CWE-200
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Local File Inclusion (2.1.56)
CVE-2016-6565
CWE-22
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Local File Inclusion (2.1.7)
-
CWE-22
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Cross-Site Request Forgery Vulnerabilities (3.4.7)
CVE-2020-35943
CWE-352
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Cross-Site Scripting Vulnerabilities (2.0.66.16)
-
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Cross-Site Scripting Vulnerabilities (2.1.20)
-
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Cross-Site Scripting Vulnerabilities (2.1.9)
CVE-2015-9537
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple HTML Injection Vulnerabilities (1.9.0)
-
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Vulnerabilities (2.0.77)
CVE-2015-1785
CWE-434
High
WordPress Plugin NextGEN Gallery-WordPress Gallery PHP Object Injection (3.1.5)
-
CWE-915
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Privilege Escalation (3.2.2)
-
CWE-264
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Remote Code Execution (2.1.59)
-
CWE-94
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Security Bypass (3.1.6)
-
CWE-264
High
WordPress Plugin NextGEN Gallery-WordPress Gallery SQL Injection (2.1.77)
-
CWE-89
High
WordPress Plugin NextGEN Gallery-WordPress Gallery SQL Injection (3.2.10)
CVE-2019-14314
CWE-89
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Unspecified Vulnerability (2.0.77.3)
-
-
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Unspecified Vulnerability (2.2.46)
CVE-2018-7586
-
High
WordPress Plugin NextGEN Pro Cross-Site Scripting (3.1.9)
CVE-2021-24293
CWE-79
High
WordPress Plugin NextGEN Smooth Gallery 'galleryID' Parameter SQL Injection (1.2)
-
CWE-89
High
WordPress Plugin NextMove Lite-Thank You Page for WooCommerce Cross-Site Request Forgery (2.18.1)
CVE-2024-32104
CWE-352
High
WordPress Plugin NextMove Lite-Thank You Page for WooCommerce Security Bypass (2.17.0)
CVE-2024-25092
CWE-862
High
WordPress Plugin NextScripts:Social Networks Auto-Poster Cross-Site Request Forgery (4.3.24)
CVE-2021-25072
CWE-352
High
WordPress Plugin NextScripts:Social Networks Auto-Poster Cross-Site Scripting (3.4.17)
-
CWE-79
High
WordPress Plugin NextScripts:Social Networks Auto-Poster Cross-Site Scripting (4.2.7)
CVE-2019-9911
CWE-79
High
WordPress Plugin NextScripts:Social Networks Auto-Poster Cross-Site Scripting (4.3.20)
CVE-2021-38356
CWE-79
High
WordPress Plugin NextScripts:Social Networks Auto-Poster Cross-Site Scripting (4.3.23)
CVE-2021-24975
CWE-79
High
WordPress Plugin NextScripts:Social Networks Auto-Poster Security Bypass (4.3.17)
-
CWE-264
High
WordPress Plugin NextScripts:Social Networks Auto-Poster Unspecified Vulnerability (4.3.2)
-
-
High
WordPress Plugin Nginx Helper Cross-Site Scripting (1.8.9)
-
CWE-79
High
WordPress Plugin Nifty Newsletters (Formerly Sola Newsletters) Cross-Site Request Forgery (4.0.23)
CVE-2021-34634
CWE-352
High
WordPress Plugin Ninja Announcements Lite 'ninja_annc.php' SQL Injection (1.2.3)
-
CWE-89
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder Cross-Site Request Forgery (3.4.24.1)
CVE-2020-12462
CWE-352
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Request Forgery (2.7.7)
-
CWE-352
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Request Forgery (3.4.27)
CVE-2020-36174
CWE-352
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (2.8.6)
CVE-2014-8815
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (2.9.10)
-
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (2.9.18)
-
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (2.9.28)
-
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (2.9.31)
-
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.2.13)
CVE-2018-7280
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.3.17)
CVE-2018-19287
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.3.21)
-
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.4.22.1)
CVE-2020-8594
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.5.8)
-
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.5.8.1)
CVE-2021-24381
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.6.21)
CVE-2023-1835
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.6.6)
-
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Cross-Site Scripting Vulnerabilities (2.8.8)
CVE-2015-2220
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Cross-Site Scripting Vulnerabilities (2.9.21)
-
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Cross-Site Scripting Vulnerabilities (2.9.51)
-
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Vulnerabilities (2.9.42)
CVE-2016-1209
CWE-915
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Vulnerabilities (3.3.13)
CVE-2018-16308
CWE-79
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Vulnerabilities (3.4.33)
CVE-2021-24166
CWE-601
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Vulnerabilities (3.4.34)
CVE-2021-24164
CWE-200
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Open Redirect (3.3.19)
CVE-2018-19796
CWE-601
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress PHP Code Injection (3.6.10)
-
CWE-94
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress PHP Object Injection (3.6.12)
CVE-2022-2903
CWE-915
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Security Bypass (3.0.30)
-
CWE-264
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Security Bypass (3.5.7)
CVE-2021-34648
CWE-264
High
WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress SQL Injection (2.9.29)
-
CWE-89
High