Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 25223 vulnerabilities in 64 categories.

Critical: 1706 High: 13413 Medium: 9129 Low: 904 Information: 71
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WP Courses LMS Security Bypass (2.0.28)
CVE-2020-26876
CWE-264
High
WordPress Plugin WP Crontrol Cross-Site Scripting (1.2.3)
-
CWE-79
High
WordPress Plugin WP CSS 'wp-css-compress.php' Local File Disclosure (2.0.5)
-
CWE-22
High
WordPress Plugin WP CSV Exporter SQL Injection (1.3.6)
CVE-2022-3249
CWE-89
High
WordPress Plugin WP CSV Unspecified Vulnerability (1.7.8.0)
-
-
High
WordPress Plugin WP Custom Admin Interface PHP Object Injection (7.28)
CVE-2022-4043
CWE-915
High
WordPress Plugin WP Custom Admin Login Page Logo Unspecified Vulnerability (1.4.1)
-
-
High
WordPress Plugin WP Custom Cursors Multiple Vulnerabilities (3.0)
CVE-2022-3151
CWE-352
High
WordPress Plugin WP Custom Fields Search Cross-Site Scripting (0.3.28)
CVE-2017-9419
CWE-79
High
WordPress Plugin WP Custom Fields Search Cross-Site Scripting (1.2.34)
CVE-2022-47157
CWE-79
High
WordPress Plugin WP Custom Pages 'url' Parameter Local File Disclosure (0.5.0.1)
CVE-2011-1669
CWE-22
High
WordPress Plugin Wp custom slider SQL Injection (1.6.2)
-
CWE-89
High
WordPress Plugin WP Customer Area Cross-Site Request Forgery (8.1.3)
CVE-2022-4745
CWE-352
High
WordPress Plugin WP Customer Area Cross-Site Scripting (7.4.2)
-
CWE-79
High
WordPress Plugin WP Customer Reviews Cross-Site Scripting (3.4.2)
CVE-2021-24135
CWE-79
High
WordPress Plugin WP Customer Reviews Cross-Site Scripting (3.5.5)
CVE-2021-24296
CWE-79
High
WordPress Plugin WP Customer Reviews Multiple Vulnerabilities (3.0.8)
-
CWE-352
High
WordPress Plugin WP Customer Reviews Unspecified Vulnerability (3.0.7)
-
-
High
WordPress Plugin WP Customize Login Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin WP Dark Mode-Best Dark Mode & Social Sharing for WordPress Cross-Site Scripting (3.0.6)
CVE-2022-4714
CWE-79
High
WordPress Plugin WP Data Access Privilege Escalation (5.3.7)
CVE-2023-1874
CWE-269
High
WordPress Plugin WP Data Access Security Bypass (5.1.3)
-
CWE-862
High
WordPress Plugin WP Data Access SQL Injection (4.3.1)
CVE-2021-24866
CWE-89
High
WordPress Plugin WP Database Backup Cross-Site Request Forgery (4.3.5)
-
CWE-352
High
WordPress Plugin WP Database Backup Cross-Site Request Forgery (5.1.2)
-
CWE-352
High
WordPress Plugin WP Database Backup Cross-Site Scripting (3.3)
-
CWE-79
High
WordPress Plugin WP Database Backup Cross-Site Scripting (5.1.1)
CVE-2019-14949
CWE-79
High
WordPress Plugin WP Database Backup Unspecified Vulnerability (4.1)
-
-
High
WordPress Plugin WP Database Reset Multiple Security Bypass Vulnerabilities (3.1)
CVE-2020-7048
CWE-264
High
WordPress Plugin WP Datepicker Security Bypass (2.1.0)
CVE-2024-3895
CWE-862
High
WordPress Plugin WP Debugging Security Bypass (2.10.2)
CVE-2021-24779
CWE-264
High
WordPress Plugin WP Design Maps & Places Cross-Site Scripting (1.2)
CVE-2021-38334
CWE-79
High
WordPress Plugin WP Dev Powers:ACF Color Coded Field Types Security Bypass (1.0)
-
CWE-264
High
WordPress Plugin WP Dialog Cross-Site Scripting (1.2.5.5)
CVE-2021-24600
CWE-79
High
WordPress Plugin WP Discourse Unspecified Vulnerability (0.9.7)
-
-
High
WordPress Plugin WP Docs Multiple Vulnerabilities (1.1.7)
-
CWE-915
High
WordPress Plugin WP Doctor Potential Malicious Code (1.7)
-
CWE-506
High
WordPress Plugin WP Domain Redirect SQL Injection (1.0)
CVE-2021-24401
CWE-89
High
WordPress Plugin WP DoNotTrack Cross-Site Scripting (0.8.8)
-
CWE-79
High
WordPress Plugin WP Download Codes Cross-Site Scripting (2.5.1)
-
CWE-79
High
WordPress Plugin wp Dreamwork Gallery 'upload.php' Arbitrary File Upload (2.1)
-
CWE-434
High
WordPress Plugin wp Dreamwork Gallery Arbitrary File Upload (2.3)
-
CWE-434
High
WordPress Plugin WP DS FAQ 'ajax.php' SQL Injection (1.3.2)
-
CWE-89
High
WordPress Plugin WP DS FAQ Plus Cross-Site Scripting (1.4.1)
-
CWE-79
High
WordPress Plugin WP DSGVO Tools (GDPR) Cross-Site Request Forgery (2.2.18)
CVE-2019-15777
CWE-352
High
WordPress Plugin WP DSGVO Tools (GDPR) Cross-Site Scripting (3.1.23)
-
CWE-79
High
WordPress Plugin WP DSGVO Tools (GDPR) PHP Object Injection (2.0.4)
-
CWE-915
High
WordPress Plugin WP DSGVO Tools (GDPR) Security Bypass (3.1.23)
CVE-2021-42359
CWE-264
High
WordPress Plugin WP DSGVO Tools (GDPR) Unspecified Vulnerability (3.1.26)
-
-
High
WordPress Plugin WP Dynamic Keywords Injector Cross-Site Request Forgery (2.3.15)
CVE-2022-47141
CWE-352
High
WordPress Plugin WP e-Commerce Predictive Search Cross-Site Scripting (1.1.1)
-
CWE-79
High
WordPress Plugin WP e-Commerce Shop Styling Arbitrary File Download (2.5)
CVE-2015-5468
CWE-22
High
WordPress Plugin WP e-Commerce Shop Styling Local File Inclusion (2.9.1)
CVE-2014-2383
CWE-22
High
WordPress Plugin WP e-Commerce Shop Styling Remote File Inclusion (1.7.2)
CVE-2013-0724
CWE-94
High
WordPress Plugin WP e-Commerce-Clockwork SMS Cross-Site Scripting (2.0.5)
CVE-2017-17780
CWE-79
High
WordPress Plugin WP e-Commerce-Store Exporter Privilege Escalation (1.6.6)
-
CWE-264
High
WordPress Plugin WP e-Commerce-Store Toolkit Privilege Escalation (2.0)
-
CWE-264
High
WordPress Plugin WP e-Commerce-Store Toolkit Privilege Escalation (2.0.1)
-
CWE-264
High
WordPress Plugin WP E-Signature Remote Code Execution (1.5.6.5)
-
CWE-94
High
WordPress Plugin WP Easy Columns Cross-Site Scripting (2.1.3)
-
CWE-79
High
WordPress Plugin WP Easy full backup Information Disclosure (1.4)
-
CWE-200
High
WordPress Plugin WP Easy Gallery 'add-gallery.php' Arbitrary File Upload (1.8)
-
CWE-434
High
WordPress Plugin WP Easy Gallery 'select_gallery' Parameter Cross-Site Scripting (1.7)
-
CWE-79
High
WordPress Plugin WP Easy Gallery Cross-Site Scripting (4.1)
-
CWE-79
High
WordPress Plugin WP Easy Gallery Cross-Site Scripting (4.1.3)
-
CWE-79
High
WordPress Plugin WP Easy Gallery Cross-Site Scripting (4.1.4)
-
CWE-79
High
WordPress Plugin WP Easy Gallery Multiple Unspecified Vulnerabilities (2.7)
-
-
High
WordPress Plugin WP Easy Poll Multiple Vulnerabilities (1.1.3)
-
CWE-352
High
WordPress Plugin WP Easy Post Types Cross-Site Scripting (1.4.3)
CVE-2014-4524
CWE-79
High
WordPress Plugin WP Easy Slideshow Multiple Cross-Site Request Forgery Vulnerabilities (1.0.3)
-
CWE-352
High
WordPress Plugin WP Easy Stats 'homep' Parameter Remote File Include (1.8)
-
CWE-94
High
WordPress Plugin WP EasyPay-Square for WordPress Cross-Site Request Forgery (3.2.0)
-
CWE-352
High
WordPress Plugin WP eCommerce 'cart_messages[]' Parameter Cross-Site Scripting (3.8.6)
-
CWE-79
High
WordPress Plugin WP eCommerce 'collected_data[]' SQL Injection (3.8.4)
-
CWE-89
High
WordPress Plugin WP eCommerce 'cs1' Parameter SQL Injection (3.8.6)
-
CWE-89
High