Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 24342 vulnerabilities in 62 categories.

Critical: 1593 High: 13071 Medium: 8734 Low: 875 Information: 69
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Tickera-WordPress Event Ticketing Cross-Site Request Forgery (3.5.1.0)
CVE-2023-23726
CWE-352
High
WordPress Plugin Tickera-WordPress Event Ticketing Cross-Site Scripting (3.4.8.2)
CVE-2021-24797
CWE-79
High
WordPress Plugin Tickera-WordPress Event Ticketing Security Bypass (3.4.9.1)
-
CWE-862
High
WordPress Plugin Tickera-WordPress Event Ticketing Unspecified Vulnerability (3.4.6.7)
-
-
High
WordPress Plugin Ticket Manager Cross-Site Scripting (1)
-
CWE-79
High
WordPress Plugin Ticketrilla:Client PHP Object Injection (1.0.1)
-
CWE-915
High
WordPress Plugin Tidio Gallery Multiple Vulnerabilities (1.1)
CVE-2016-1000153
CWE-434
High
WordPress Plugin Tidio Live Chat Cross-Site Request Forgery (4.1.0)
-
CWE-352
High
WordPress Plugin Tierra's Billboard Manager SQL Injection (1.14)
-
CWE-89
High
WordPress Plugin Tigris for Salesforce PHP Object Injection (1.1.3)
-
CWE-915
High
WordPress Plugin Timber Cross-Site Scripting (1.2.2)
-
CWE-79
High
WordPress Plugin Time Sheets Cross-Site Scripting (1.4.2)
-
CWE-79
High
WordPress Plugin Time Sheets Multiple Cross-Site Scripting Vulnerabilities (1.5.1)
-
CWE-79
High
WordPress Plugin Timed Content Cross-Site Scripting (2.72)
CVE-2023-0067
CWE-79
High
WordPress Plugin Timed Popup Cross-Site Request Forgery (1.3)
CVE-2014-9525
CWE-352
High
WordPress Plugin Timeline Calendar SQL Injection (1.2)
CVE-2021-24553
CWE-89
High
WordPress Plugin Timeline Event History PHP Object Injection (3.1)
CVE-2024-5726
CWE-915
High
WordPress Plugin Timesheet by BestWebSoft Cross-Site Scripting (0.1.4)
CVE-2017-2171
CWE-79
High
WordPress Plugin Timetable and Event Schedule by MotoPress Cross-Site Request Forgery (2.4.1)
CVE-2021-24584
CWE-352
High
WordPress Plugin Timetable and Event Schedule by MotoPress Cross-Site Scripting (2.3.18)
CVE-2021-24724
CWE-79
High
WordPress Plugin Timetable and Event Schedule by MotoPress Information Disclosure (2.3.19)
CVE-2021-24585
CWE-200
High
WordPress Plugin Timetable and Event Schedule by MotoPress Unspecified Vulnerability (2.4.3)
-
-
High
WordPress Plugin Tiny URL Cross-Site Scripting (1.3.2)
CVE-2013-1808
CWE-79
High
WordPress Plugin TinyMCE Advanced Cross-Site Request Forgery (4.1)
-
CWE-352
High
WordPress Plugin TinyMCE Color Picker Multiple Vulnerabilities (1.1)
CVE-2014-3845
CWE-352
High
WordPress Plugin TinyMCE Custom Styles Cross-Site Scripting (1.1.2)
CVE-2023-23995
CWE-79
High
WordPress Plugin Tinymce Thumbnail Gallery 'href' Parameter Information Disclosure (1.0.7)
-
CWE-22
High
WordPress Plugin Titan Anti-spam & Security Cross-Site Scripting (4.1)
-
CWE-79
High
WordPress Plugin Titan Anti-spam & Security Security Bypass (7.3.0)
CVE-2022-2877
CWE-264
High
WordPress Plugin Titan Framework Cross-Site Scripting (1.12.1)
CVE-2021-24435
CWE-79
High
WordPress Plugin Titan Framework Cross-Site Scripting (1.5.2)
CVE-2014-6444
CWE-79
High
WordPress Plugin Titan Framework Cross-Site Scripting (1.7.5)
-
CWE-79
High
WordPress Plugin to Manage/Design WordPress Blog-WP Blog Manager Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.0)
CVE-2021-24867
CWE-912
High
WordPress Plugin To Top Security Bypass (2.2.2)
CVE-2021-24752
CWE-284
High
WordPress Plugin Toggle The Title Cross-Site Scripting (1.4)
CVE-2019-14795
CWE-79
High
WordPress Plugin Token Manager 'tid' Parameter Multiple Cross-Site Scripting Vulnerabilities (1.0.2)
-
CWE-79
High
WordPress Plugin Tom M8te Directory Traversal (1.5.3)
CVE-2014-5187
CWE-22
High
WordPress Plugin ToolBar to Share Cross-Site Request Forgery (2.0)
CVE-2022-1918
CWE-352
High
WordPress Plugin ToolPage Cross-Site Scripting (1.6.1)
CVE-2014-4560
CWE-79
High
WordPress Plugin Toolset Types-Custom Post Types, Custom Fields and Taxonomies Cross-Site Scripting (1.8.7.2)
-
CWE-79
High
WordPress Plugin Toolset Types-Custom Post Types, Custom Fields and Taxonomies Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (1.2.1.1)
CVE-2013-2768
CWE-352
High
WordPress Plugin Toolset Types-Custom Post Types, Custom Fields and Taxonomies Multiple Unspecified Vulnerabilities (2.2.2)
-
-
High
WordPress Plugin Toolset Types-Custom Post Types, Custom Fields and Taxonomies PHP Object Injection (1.5.7)
-
CWE-915
High
WordPress Plugin Toolset Types-Custom Post Types, Custom Fields and Taxonomies Privilege Escalation (2.3.3)
-
CWE-264
High
WordPress Plugin Tooltipy (tooltips for WP) Multiple Vulnerabilities (5.0.2)
-
CWE-352
High
WordPress Plugin Top 10-Popular posts for WordPress Cross-Site Request Forgery (1.9.2)
-
CWE-352
High
WordPress Plugin Top 10-Popular posts for WordPress Cross-Site Request Forgery (2.9.4)
-
CWE-352
High
WordPress Plugin Top 10-Popular posts for WordPress Cross-Site Scripting (2.3.0)
-
CWE-79
High
WordPress Plugin Top 10-Popular posts for WordPress Cross-Site Scripting (3.2.2)
CVE-2022-4570
CWE-79
High
WordPress Plugin Top 10-Popular posts for WordPress Multiple Vulnerabilities (3.2.3)
CVE-2023-25993
CWE-862
High
WordPress Plugin Top 10-Popular posts for WordPress Multiple Vulnerabilities (3.2.4)
CVE-2023-26008
CWE-284
High
WordPress Plugin Top 10-Popular posts for WordPress SQL Injection (2.4.3)
-
CWE-89
High
WordPress Plugin Top Quark Architecture 'script.php' Arbitrary File Upload (2.1.0)
-
CWE-434
High
WordPress Plugin Total Donations for Wordpress Security Bypass (2.0.5)
CVE-2019-6703
CWE-264
High
WordPress Plugin Total GDPR Compliance Lite-WordPress for GDPR Compatibility includes Backdoor [Only if downloaded via the vendor website] (1.0.4)
CVE-2021-24867
CWE-912
High
WordPress Plugin Total Sales For Woocommerce Cross-Site Scripting (1.1)
CVE-2021-24435
CWE-79
High
WordPress Plugin Total Security Multiple Unspecified Vulnerabilities (3.4.1)
-
-
High
WordPress Plugin Total Security Multiple Vulnerabilities (3.4)
-
CWE-264
High
WordPress Plugin Total Team Lite-Responsive Team Manager/Showcase for WordPress includes Backdoor [Only if downloaded via the vendor website] (1.1.1)
CVE-2021-24867
CWE-912
High
WordPress Plugin Total Upkeep-WordPress Backup plus Restore & Migrate by BoldGrid Information Disclosure (1.14.9)
-
CWE-200
High
WordPress Plugin tPlayer-Audio Player for WordPress Multiple Cross-Site Scripting Vulnerabilities (1.1.5)
-
CWE-79
High
WordPress Plugin TR Easy Google Analytics Cross-Site Scripting (1.0.0)
-
CWE-79
High
WordPress Plugin Track That Stat 'data' Parameter Cross-Site Scripting (1.0.8)
-
CWE-79
High
WordPress Plugin Tracking Code Manager Multiple Vulnerabilities (1.11.1)
-
CWE-400
High
WordPress Plugin TRADIES Information Disclosure (2.2.6)
-
CWE-200
High
WordPress Plugin Traffic Analyzer Cross-Site Scripting (3.3.2)
CVE-2013-3526
CWE-79
High
WordPress Plugin Traffic Analyzer SQL Injection (3.4.2)
-
CWE-89
High
WordPress Plugin Traffic Manager Multiple Vulnerabilities (1.4.5)
-
CWE-352
High
WordPress Plugin Translate Multilingual sites-TranslatePress Cross-Site Scripting (2.0.8)
CVE-2021-24610
CWE-79
High
WordPress Plugin Translate WordPress with GTranslate Cross-Site Scripting (2.8.51)
CVE-2020-11930
CWE-79
High
WordPress Plugin Translate WordPress with GTranslate Cross-Site Scripting (2.8.64)
CVE-2021-34630
CWE-79
High
WordPress Plugin Translate WordPress with GTranslate Open Redirect (2.8.10)
-
CWE-601
High
WordPress Plugin Translate WordPress-Google Language Translator Cross-Site Scripting (4.0.9)
-
CWE-79
High
WordPress Plugin Translate WordPress-Google Language Translator Cross-Site Scripting (5.0.05)
-
CWE-79
High
WordPress Plugin Translate WordPress-Google Language Translator Cross-Site Scripting (6.0.11)
-
CWE-79
High