Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 25223 vulnerabilities in 64 categories.

Critical: 1706 High: 13413 Medium: 9129 Low: 904 Information: 71
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin N5 Upload Form Arbitrary File Upload (1.0)
CVE-2021-24223
CWE-434
High
WordPress Plugin NAB Transact Security Bypass (2.1.0)
CVE-2020-11497
CWE-264
High
WordPress Plugin Namaste! LMS Cross-Site Scripting (2.5.9.3)
CVE-2023-0548
CWE-79
High
WordPress Plugin Namaste! LMS Cross-Site Scripting (2.5.9.4)
-
CWE-79
High
WordPress Plugin Name Directory Cross-Site Request Forgery (1.17.4)
CVE-2021-20652
CWE-352
High
WordPress Plugin Name Directory Cross-Site Scripting (1.7.6)
-
CWE-79
High
WordPress Plugin Navis DocumentCloud Cross-Site Scripting (0.1)
CVE-2015-2807
CWE-79
High
WordPress Plugin nBill Lite PHP Object Injection (3.2.2)
-
CWE-915
High
WordPress Plugin ND Shortcodes For Visual Composer Security Bypass (5.8)
CVE-2019-15771
CWE-264
High
WordPress Plugin Nelio AB Testing Directory Traversal (4.4.4)
-
CWE-22
High
WordPress Plugin Nelio AB Testing Server-Side Request Forgery (4.5.10)
-
CWE-918
High
WordPress Plugin Nested Pages Cross-Site Scripting (1.6.5.2)
-
CWE-79
High
WordPress Plugin Nested Pages Multiple Vulnerabilities (3.1.15)
CVE-2021-38343
CWE-601
High
WordPress Plugin Network Publisher 'networkpub_key' Parameter Cross-Site Scripting (5.0.1)
-
CWE-79
High
WordPress Plugin Neuvoo Jobs Cross-Site Scripting (2.0)
-
CWE-79
High
WordPress Plugin New Year Firework Cross-Site Scripting (1.1.9)
CVE-2016-1000140
CWE-79
High
WordPress Plugin News Element Elementor Blog Magazine Local File Inclusion (1.0.5)
CVE-2024-6459
CWE-22
High
WordPress Plugin Newsletter by Supsystic Cross-Site Scripting (1.1.7)
-
CWE-79
High
WordPress Plugin Newsletter by Supsystic SQL Injection (1.5.5)
-
CWE-89
High
WordPress Plugin Newsletter Manager Multiple Cross-Site Scripting Vulnerabilities (1.0.1)
CVE-2012-6628
CWE-79
High
WordPress Plugin Newsletter Manager PHP Object Injection (1.5.1)
-
CWE-915
High
WordPress Plugin Newsletter Meenews 'idnews' Parameter Cross-Site Scripting (5.1.0)
-
CWE-79
High
WordPress Plugin Newsletter Subscription Form Possible Remote Code Execution (1.1.2)
CVE-2016-10045
CWE-94
High
WordPress Plugin Newsletter-Send awesome emails from WordPress Cross-Site Scripting (3.2.6)
-
CWE-79
High
WordPress Plugin Newsletter-Send awesome emails from WordPress Cross-Site Scripting (4.6.0)
-
CWE-79
High
WordPress Plugin Newsletter-Send awesome emails from WordPress Cross-Site Scripting (6.7.6)
-
CWE-79
High
WordPress Plugin Newsletter-Send awesome emails from WordPress Cross-Site Scripting (7.8.9)
CVE-2023-4772
CWE-79
High
WordPress Plugin Newsletter-Send awesome emails from WordPress CSV Injection (6.5.3)
-
CWE-20
High
WordPress Plugin Newsletter-Send awesome emails from WordPress Multiple Vulnerabilities (6.8.1)
CVE-2020-35933
CWE-915
High
WordPress Plugin Newsletter-Send awesome emails from WordPress Open Redirect (2.6.4.4)
-
CWE-601
High
WordPress Plugin Newsletter-Send awesome emails from WordPress Open Redirect (3.7.0)
-
CWE-601
High
WordPress Plugin Newsletter-Send awesome emails from WordPress SQL Injection (3.0.8)
-
CWE-89
High
WordPress Plugin Newsletter-Send awesome emails from WordPress Unspecified Vulnerability (4.1.1)
-
-
High
WordPress Plugin Newsletters Cross-Site Scripting (4.6.18)
-
CWE-79
High
WordPress Plugin Newsletters Multiple Vulnerabilities (4.6.14)
CVE-2019-14788
CWE-94
High
WordPress Plugin Newsletters Multiple Vulnerabilities (4.6.5.3)
-
CWE-538
High
WordPress Plugin Newsletters Multiple Vulnerabilities (4.6.6.2)
-
CWE-434
High
WordPress Plugin Newsletters PHP Object Injection (4.6.8.5)
-
CWE-915
High
WordPress Plugin Newsletters Unspecified Vulnerability (4.5.5.2)
-
-
High
WordPress Plugin Newspack Blocks Arbitrary File Upload (3.0.8)
CVE-2024-37424
CWE-434
High
WordPress Plugin NewsPlugin Cross-Site Request Forgery (1.0.18)
CVE-2021-34631
CWE-352
High
WordPress Plugin NewStatPress Cross-Site Scripting (1.0.3)
-
CWE-79
High
WordPress Plugin NewStatPress Cross-Site Scripting (1.0.5)
-
CWE-79
High
WordPress Plugin NewStatPress Cross-Site Scripting (1.2.4)
-
CWE-79
High
WordPress Plugin NewStatPress Multiple Vulnerabilities (0.9.8)
CVE-2015-4063
CWE-89
High
WordPress Plugin NewStatPress Multiple Vulnerabilities (1.0.4)
CVE-2015-9313
CWE-89
High
WordPress Plugin NEX-Forms Lite-WordPress Contact Form builder Cross-Site Scripting (2.1.0)
CVE-2014-7151
CWE-79
High
WordPress Plugin NEX-Forms-The Ultimate WordPress Form Builder Security Bypass (7.8.7)
CVE-2021-34676
CWE-264
High
WordPress Plugin NEX-Forms-Ultimate Form builder Multiple SQL Injection Vulnerabilities (4.0)
-
CWE-89
High
WordPress Plugin NEX-Forms-Ultimate Form builder SQL Injection (3.0)
-
CWE-89
High
WordPress Plugin NextCellent Gallery-NextGEN Legacy Cross-Site Scripting (1.9.17)
CVE-2014-3123
CWE-79
High
WordPress Plugin NextCellent Gallery-NextGEN Legacy Cross-Site Scripting (1.9.27)
-
CWE-79
High
WordPress Plugin Nextend Facebook Connect Cross-Site Scripting (1.5.0)
CVE-2014-8800
CWE-79
High
WordPress Plugin Nextend Facebook Connect Cross-Site Scripting (1.5.5)
CVE-2015-4413
CWE-79
High
WordPress Plugin Nextend Facebook Connect Unspecified Vulnerability (1.5.7)
-
-
High
WordPress Plugin Nextend Google Connect Cross-Site Scripting (1.5.0)
-
CWE-79
High
WordPress Plugin Nextend Google Connect Cross-Site Scripting (1.5.2)
CVE-2015-4557
CWE-79
High
WordPress Plugin Nextend Google Connect Unspecified Vulnerability (1.5.3)
-
-
High
WordPress Plugin Nextend Twitter Connect Cross-Site Scripting (1.5.0)
-
CWE-79
High
WordPress Plugin Nextend Twitter Connect Cross-Site Scripting (1.5.1)
CVE-2015-4557
CWE-79
High
WordPress Plugin NextGEN Gallery Sell Photo Cross-Site Scripting (1.0.4)
-
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery 'Gallery Path' Field Cross-Site Scripting (1.9.5)
-
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery 'nggallery-manage-gallery' HTML Injection (0.96)
CVE-2008-7175
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery 'swfupload.swf' Cross-Site Scripting (1.9.7)
CVE-2012-3414
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery 'xml/media-rss.php' Cross-Site Scripting (1.5.1)
CVE-2010-1186
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Arbitrary File Upload (1.9.12)
CVE-2013-3684
CWE-434
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Arbitrary File Upload (2.1.10)
-
CWE-434
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Cross-Site Scripting (2.2.10)
-
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (1.8.3)
-
CWE-79
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Directory Traversal (2.0.0)
-
CWE-22
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Directory Traversal (2.1.9)
-
CWE-22
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Information Disclosure (1.9.11)
CVE-2013-0291
CWE-200
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Local File Inclusion (2.1.56)
CVE-2016-6565
CWE-22
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Local File Inclusion (2.1.7)
-
CWE-22
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Cross-Site Request Forgery Vulnerabilities (3.4.7)
CVE-2020-35943
CWE-352
High