Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 24342 vulnerabilities in 62 categories.

Critical: 1593 High: 13071 Medium: 8734 Low: 875 Information: 69
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Product Catalog for WordPress Unspecified Vulnerability (1.4.5)
-
-
High
WordPress Plugin Product Catalog Multiple SQL Injection Vulnerabilities (2.1)
-
CWE-89
High
WordPress Plugin Product Catalog Multiple Vulnerabilities (3.1.2)
-
CWE-434
High
WordPress Plugin Product Catalog Multiple Vulnerabilities (4.2.11)
CVE-2017-12200
CWE-89
High
WordPress Plugin Product Catalog PHP Object Injection (4.2.25)
-
CWE-915
High
WordPress Plugin Product Catalog Privilege Escalation (3.8.1)
-
CWE-264
High
WordPress Plugin Product Catalog SQL Injection (3.1.2)
-
CWE-89
High
WordPress Plugin Product Catalog SQL Injection (3.9.8)
-
CWE-89
High
WordPress Plugin Product Catalog SQL Injection (4.2.2)
-
CWE-89
High
WordPress Plugin Product Catalog Unspecified Vulnerability (3.1.3)
-
-
High
WordPress Plugin Product Catalog X Cross-Site Request Forgery (1.5.12)
-
CWE-352
High
WordPress Plugin Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More SQL Injection (3.3.0.3)
CVE-2021-24511
CWE-89
High
WordPress Plugin Product Filter for WooCommerce Security Bypass (8.1.1)
-
CWE-264
High
WordPress Plugin Product Import Export for WooCommerce Cross-Site Request Forgery (1.7.4)
-
CWE-352
High
WordPress Plugin Product Input Fields for WooCommerce Arbitrary File Download (1.2.6)
-
CWE-538
High
WordPress Plugin Product Limited Time Availability Date for woocommerce Cross-Site Scripting (1.0.1)
CVE-2021-24435
CWE-79
High
WordPress Plugin Product list Widget for Woocommerce Cross-Site Scripting (1.0)
CVE-2022-4329
CWE-79
High
WordPress Plugin Product Lister for Walmart Remote Code Execution (1.0.1)
CVE-2017-9841
CWE-94
High
WordPress Plugin Product Loops for WooCommerce-100+ Awesome styles and options for your WooCommerce products Security Bypass (1.6.1)
-
CWE-264
High
WordPress Plugin Product Reviews Import Export for WooCommerce Cross-Site Request Forgery (1.3.2)
-
CWE-352
High
WordPress Plugin Product Reviews Import Export for WooCommerce CSV Injection (1.4.8)
CVE-2022-46802
CWE-1236
High
WordPress Plugin Product Size charts for Woocommerce Unspecified Vulnerability (1.0)
-
-
High
WordPress Plugin Product Slider and Carousel with Category for WooCommerce Cross-Site Scripting (2.7.1)
CVE-2022-4791
CWE-79
High
WordPress Plugin Product Slider for WooCommerce by PickPlugins Cross-Site Scripting (1.13.41)
CVE-2023-0166
CWE-79
High
WordPress Plugin Product Slider for WooCommerce Cross-Site Scripting (2.6.3)
CVE-2022-4629
CWE-79
High
WordPress Plugin Product Slider For WooCommerce Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.5)
CVE-2021-24867
CWE-912
High
WordPress Plugin Product Slider for WooCommerce Security Bypass (2.5.6)
CVE-2022-2382
CWE-862
High
WordPress Plugin Product Subtitle For WooCommerce Arbitrary File Disclosure (4.1)
-
CWE-538
High
WordPress Plugin Product Table by WBW Remote Code Execution (2.0.1)
CVE-2024-6365
CWE-94
High
WordPress Plugin Profile Builder Pro Security Bypass (3.1.0)
-
CWE-264
High
WordPress Plugin Profile Builder Pro SQL Injection (3.3.2)
-
CWE-89
High
WordPress Plugin Profile Extra Fields by BestWebSoft Cross-Site Scripting (1.0.7)
CVE-2017-2171
CWE-79
High
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Cross-Site Scripting (2.6.6)
-
CWE-79
High
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Cross-Site Scripting (4.7.4)
CVE-2022-0233
CWE-79
High
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Privilege Escalation (5.8.9)
CVE-2024-6411
CWE-269
High
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Remote Code Execution (2.8.5)
CVE-2019-15873
CWE-94
High
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Unspecified Vulnerability (2.6.4)
-
-
High
WordPress Plugin Profiles 'bio-img.php' SQL Injection (2.0RC1)
-
CWE-89
High
WordPress Plugin Project Status Cross-Site Scripting (1.6)
CVE-2021-24558
CWE-79
High
WordPress Plugin Project Supremacy V3 Lite Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin Project2App-Turn Your WordPress Site into an Android App Cross-Site Scripting (2.0.2)
CVE-2021-24435
CWE-79
High
WordPress Plugin PromoBar by BestWebSoft Cross-Site Scripting (1.1.0)
CVE-2017-18529
CWE-79
High
WordPress Plugin Properties and Agents-Real Estate Manager Cross-Site Scripting (6.7.1)
-
CWE-79
High
WordPress Plugin PropertyHive Cross-Site Scripting (1.4.14)
CVE-2018-6465
CWE-79
High
WordPress Plugin PropertyHive Remote Code Execution (1.4.25)
-
CWE-94
High
WordPress Plugin ProPlayer 'pp_playlist_id' Parameter SQL Injection (4.7.7)
-
CWE-89
High
WordPress Plugin ProPlayer SQL Injection (4.7.9.1)
-
CWE-89
High
WordPress Plugin Protected Posts Logout Button Cross-Site Request Forgery (1.4.4)
-
CWE-352
High
WordPress Plugin Protected Posts Logout Button Security Bypass (1.4.5)
CVE-2023-25454
CWE-862
High
WordPress Plugin PS PHPCaptcha WP Denial of Service (1.1.0)
CVE-2019-7412
CWE-400
High
WordPress Plugin Publish to Schedule Cross-Site Request Forgery (4.4.2)
CVE-2023-25994
CWE-352
High
WordPress Plugin Publish to Schedule Cross-Site Scripting (4.5.4)
CVE-2023-26519
CWE-79
High
WordPress Plugin PublishPress Capabilities-User Role Access, Editor Permissions, Admin Menus Cross-Site Request Forgery (2.3.1)
-
CWE-352
High
WordPress Plugin PublishPress Capabilities-User Role Access, Editor Permissions, Admin Menus Security Bypass (2.3)
CVE-2021-25032
CWE-264
High
WordPress Plugin PublishPress Future: Automatically Unpublish WordPress Posts Cross-Site Scripting (2.7.0)
-
CWE-79
High
WordPress Plugin PublishPress Future: Automatically Unpublish WordPress Posts Multiple Vulnerabilities (2.1.1)
-
CWE-352
High
WordPress Plugin PublishPress Future: Automatically Unpublish WordPress Posts Security Bypass (2.5.1)
CVE-2021-24783
CWE-264
High
WordPress Plugin PublishPress:Editorial Calendar, Workflow, Comments, Notifications and Statuses Cross-Site Scripting (3.5.0)
-
CWE-79
High
WordPress Plugin PureHTML 'alter.php' SQL Injection (1.0.0)
-
CWE-89
High
WordPress Plugin Push Notifications for WordPress (Lite) Cross-Site Request Forgery (6.0)
CVE-2021-20846
CWE-352
High
WordPress Plugin PushEngage Web Push Notifications Cross-Site Scripting (1.5.8)
-
CWE-79
High
WordPress Plugin PWA for WP & AMP Security Bypass (1.7.32)
-
CWE-264
High
WordPress Plugin PWA for WP & AMP Unspecified Vulnerability (1.0.8)
-
-
High
WordPress Plugin PWAMP PHP Object Injection (1.0.0)
-
CWE-915
High
WordPress Plugin PWG Random Cross-Site Request Forgery (1.11)
CVE-2014-9394
CWE-352
High
WordPress Plugin Pym.js Embeds Cross-Site Scripting (1.3.2)
-
CWE-79
High
WordPress Plugin Q and A FAQ and Knowledge Base for WordPress Multiple SQL Injection Vulnerabilities (1.0.6.2)
-
CWE-89
High
WordPress Plugin Qards Cross-Site Scripting (1.4.3)
CVE-2017-18598
CWE-79
High
WordPress Plugin Qe SEO Handyman SQL Injection (1.0)
CVE-2022-4352
CWE-89
High
WordPress Plugin Qiniu Cloudtuchuang Cross-Site Scripting (1.8)
-
CWE-79
High
WordPress Plugin Qiniu Uploader Cross-Site Scripting (0.1)
-
CWE-79
High
WordPress Plugin QIWI payment module for Woocommerce Cross-Site Scripting (0.0.9)
CVE-2021-30134
CWE-79
High
WordPress Plugin Qode Instagram Widget (embeded in Bridge-Creative Multi-Purpose WordPress Theme) Open Redirect (2.0.1)
-
CWE-601
High
WordPress Plugin Qode Twitter Feed (embeded in Bridge-Creative Multi-Purpose WordPress Theme) Open Redirect (2.0.1)
-
CWE-601
High
WordPress Plugin QR Redirector Cross-Site Scripting (1.6)
CVE-2021-24854
CWE-79
High