Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 24342 vulnerabilities in 62 categories.

Critical: 1593 High: 13071 Medium: 8734 Low: 875 Information: 69
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Visual Website Collaboration, Feedback & Project Management-Atarim Cross-Site Scripting (3.30)
CVE-2024-2793
CWE-79
High
WordPress Plugin Visualizer:Tables and Charts Manager for WordPress Cross-Site Scripting (3.9.1)
CVE-2022-46848
CWE-79
High
WordPress Plugin Visualizer:Tables and Charts Manager for WordPress Cross-Site Scripting (3.9.4)
CVE-2023-23708
CWE-79
High
WordPress Plugin Visualizer:Tables and Charts Manager for WordPress Multiple Vulnerabilities (3.3.0)
CVE-2019-16932
CWE-918
High
WordPress Plugin Visualizer:Tables and Charts Manager for WordPress PHAR Deserialization (3.7.9)
CVE-2022-2444
CWE-502
High
WordPress Plugin Visualizer:Tables and Charts Manager for WordPress Security Bypass (3.10.15)
CVE-2024-3750
CWE-862
High
WordPress Plugin Visualizer:Tables and Charts Manager for WordPress SQL Injection (3.11.1)
CVE-2024-35736
CWE-89
High
WordPress Plugin Visualizer:Tables and Charts Manager for WordPress Unspecified Vulnerability (1.5.6)
-
-
High
WordPress Plugin Vitamin Multiple Arbitrary File Disclosure Vulnerabilities (1.0.0)
CVE-2012-6651
CWE-22
High
WordPress Plugin VK All in One Expansion Unit Cross-Site Scripting (9.85.0.1)
CVE-2023-0230
CWE-79
High
WordPress Plugin VK Gallery TimThumb Arbitrary File Upload (1.1.0)
CVE-2011-4106
CWE-20
High
WordPress Plugin VKontakte API Cross-Site Scripting (2.7)
CVE-2009-4168
CWE-79
High
WordPress Plugin VM Backups Cross-Site Request Forgery (1.0)
CVE-2021-24173
CWE-352
High
WordPress Plugin Vmax Project Manager Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin Vmax Project Manager Local File Inclusion (1.1)
-
CWE-22
High
WordPress Plugin VN-Calendar Multiple Cross-Site Scripting Vulnerabilities (1.0)
CVE-2014-4571
CWE-79
High
WordPress Plugin VO Store Locator-WP Store Locator Unspecified Vulnerability (3.2.14)
-
-
High
WordPress Plugin Vodpod Video Gallery 'gid' Parameter Cross-Site Scripting (3.1.5)
CVE-2010-4875
CWE-79
High
WordPress Plugin Vospari Forms Cross-Site Scripting (1.3)
-
CWE-79
High
WordPress Plugin Votecount for Balatarin Cross-Site Scripting (0.1.1)
CVE-2014-4572
CWE-79
High
WordPress Plugin VR Calendar Cross-Site Request Forgery (2.3.3)
CVE-2022-3852
CWE-352
High
WordPress Plugin VRView Cross-Site Scripting (1.1.3)
-
CWE-79
High
WordPress Plugin vSlider Multi Image Slider for WordPress Arbitrary File Upload (4.1.2)
-
CWE-434
High
WordPress Plugin vSlider Multi Image Slider for WordPress Multiple Vulnerabilities (4.1.2)
CVE-2023-25797
CWE-862
High
WordPress Plugin Vuukle Comments, Reactions, Share Bar, Revenue Cross-Site Request Forgery (3.4.31)
-
CWE-352
High
WordPress Plugin Vuukle Comments, Reactions, Share Bar, Revenue Unspecified Vulnerability (4.0.2)
-
-
High
WordPress Plugin W3 Total Cache Arbitrary File Disclosure (0.9.3)
CVE-2019-6715
CWE-538
High
WordPress Plugin W3 Total Cache Backdoor (0.9.2.2)
-
CWE-95
High
WordPress Plugin W3 Total Cache Information Disclosure (0.9.2.4)
-
CWE-200
High
WordPress Plugin W3 Total Cache Multiple Unspecified Vulnerabilities (0.9.5.1)
-
-
High
WordPress Plugin W3 Total Cache Multiple Vulnerabilities (0.9.4)
CVE-2014-9414
CWE-352
High
WordPress Plugin W3 Total Cache Multiple Vulnerabilities (0.9.4.1)
-
CWE-918
High
WordPress Plugin W3 Total Cache PHP Code Injection (0.9.2.8)
CVE-2013-2010
CWE-95
High
WordPress Plugin W3 Total Cache Server-Side Request Forgery (0.9.7.3)
-
CWE-918
High
WordPress Plugin W3SCloud Contact Form 7 to Zoho CRM Cross-Site Scripting (1.1.2)
CVE-2021-24435
CWE-79
High
WordPress Plugin W4 Post List Cross-Site Scripting (2.4.4)
CVE-2023-27413
CWE-79
High
WordPress Plugin W4 Post List Multiple Vulnerabilities (2.4.5)
CVE-2023-1373
CWE-200
High
WordPress Plugin WA Form Builder SQL Injection (1.1)
-
CWE-89
High
WordPress Plugin Waitlist Woocommerce (Back in stock notifier) Cross-Site Request Forgery (2.5.1)
CVE-2022-0215
CWE-352
High
WordPress Plugin Walk Score Multiple Cross-Site Scripting Vulnerabilities (0.5.5)
CVE-2014-4573
CWE-79
High
WordPress Plugin Wallable-Social Networking Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin WangGuard Cross-Site Scripting (1.7.1)
-
CWE-79
High
WordPress Plugin WangGuard Multiple Vulnerabilities (1.7.2)
-
CWE-352
High
WordPress Plugin WappPress-Create Mobile App for any WordPress site with our Mobile App Builder in just 1 minute Arbitrary File Upload (5.0.3)
CVE-2023-49815
CWE-434
High
WordPress Plugin Warranties and Returns for WooCommerce Security Bypass (5.2.1)
-
CWE-264
High
WordPress Plugin WassUp Real Time Analytics 'spy.php' SQL Injection (1.4.3)
CVE-2008-0520
CWE-89
High
WordPress Plugin WassUp Real Time Analytics Cross-Site Scripting (1.8.3)
CVE-2012-2633
CWE-79
High
WordPress Plugin WassUp Real Time Analytics Cross-Site Scripting (1.9)
-
CWE-79
High
WordPress Plugin WassUp Real Time Analytics Unspecified Vulnerability (1.7.2)
-
-
High
WordPress Plugin WatchMan-Site7 Cross-Site Request Forgery (3.0.2)
-
CWE-352
High
WordPress Plugin WatchTowerHQ Privilege Escalation (3.6.16)
CVE-2023-25701
CWE-269
High
WordPress Plugin WatchTowerHQ Security Bypass (3.6.15)
CVE-2022-44584
CWE-862
High
WordPress Plugin Watu Quiz Cross-Site Scripting (2.4.9)
CVE-2014-8804
CWE-79
High
WordPress Plugin Watu Quiz Cross-Site Scripting (3.1.2.4)
-
CWE-79
High
WordPress Plugin Watu Quiz Cross-Site Scripting (3.1.2.5)
-
CWE-79
High
WordPress Plugin Watu Quiz Cross-Site Scripting (3.3.8.1)
CVE-2023-0428
CWE-79
High
WordPress Plugin Watu Quiz Cross-Site Scripting (3.3.8.2)
CVE-2023-0429
CWE-79
High
WordPress Plugin Watu Quiz Cross-Site Scripting (3.3.9)
CVE-2023-0968
CWE-79
High
WordPress Plugin Watu Quiz Cross-Site Scripting (3.3.9.2)
CVE-2023-30483
CWE-79
High
WordPress Plugin Watu Quiz Unspecified Vulnerability (2.6)
-
-
High
WordPress Plugin WatuPRO Multiple Vulnerabilities (4.8.8.4)
-
CWE-352
High
WordPress Plugin WatuPRO SQL Injection (5.5.3.6)
CVE-2017-9834
CWE-89
High
WordPress Plugin Wbcom Designs-BuddyPress Group Reviews Security Bypass (2.8.3)
CVE-2022-2108
CWE-264
High
WordPress Plugin WBW Currency Switcher for WooCommerce Cross-Site Scripting (1.6.5)
CVE-2022-2575
CWE-79
High
WordPress Plugin WC Duplicate Order Security Bypass (1.5)
-
CWE-264
High
WordPress Plugin WC Duplicate Order Unspecified Vulnerability (1.3)
-
-
High
WordPress Plugin WCFM Membership-WooCommerce Memberships for Multivendor Marketplace Cross-Site Request Forgery (2.9.10)
CVE-2022-4941
CWE-352
High
WordPress Plugin WCFM Membership-WooCommerce Memberships for Multivendor Marketplace Insecure Direct Object Reference (2.10.7)
CVE-2023-2276
CWE-639
High
WordPress Plugin WCFM Membership-WooCommerce Memberships for Multivendor Marketplace Privilege Escalation (2.10.0)
CVE-2022-4939
CWE-269
High
WordPress Plugin WCFM-Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible SQL Injection (6.5.11)
CVE-2021-24835
CWE-89
High
WordPress Plugin WCFM-Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible Unspecified Vulnerability (6.5.12)
-
-
High
WordPress Plugin Weather Effect-Christmas Santa Snow Falling Cross-Site Request Forgery (1.3.3)
CVE-2021-24683
CWE-352
High
WordPress Plugin Weather Effect-Christmas Santa Snow Falling Cross-Site Scripting (1.3.5)
CVE-2021-24709
CWE-79
High
WordPress Plugin Weather for us-animated weather widget Crypto Mining (1.8)
-
CWE-829
High
WordPress Plugin Weaver Show Posts Cross-Site Scripting (1.6)
CVE-2023-1404
CWE-79
High