Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 25223 vulnerabilities in 64 categories.

Critical: 1706 High: 13413 Medium: 9129 Low: 904 Information: 71
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WP Google Review Slider SQL Injection (11.7)
CVE-2023-0259
CWE-89
High
WordPress Plugin WP Google Review Slider SQL Injection (6.1)
-
CWE-89
High
WordPress Plugin WP GPX Maps 'wp-gpx-maps_admin_tracks.php' Arbitrary File Upload (1.1.22)
CVE-2012-6649
CWE-434
High
WordPress Plugin WP Gravity Forms Insightly Cross-Site Scripting (1.0.6)
-
CWE-79
High
WordPress Plugin WP Gravity Forms Zendesk Cross-Site Scripting (1.0.7)
-
CWE-79
High
WordPress Plugin WP Gravity Forms Zoho CRM Add-on Cross-Site Scripting (1.1.5)
-
CWE-79
High
WordPress Plugin WP GuestMap Multiple Cross-Site Scripting Vulnerabilities (1.8)
CVE-2014-4587
CWE-79
High
WordPress Plugin WP Hardening-Fix Your WordPress Security Cross-Site Scripting (1.2.1)
CVE-2021-24373
CWE-79
High
WordPress Plugin WP Header Images Cross-Site Scripting (2.0.0)
CVE-2021-24798
CWE-79
High
WordPress Plugin WP Helper Premium Cross-Site Scripting (4.2)
CVE-2023-0448
CWE-79
High
WordPress Plugin wp heyloyalty Remote Code Execution (1.1.4)
CVE-2017-9841
CWE-94
High
WordPress Plugin WP Hide & Security Enhancer Arbitrary File Download (1.3.9.2)
-
CWE-538
High
WordPress Plugin WP Hotel Booking Cross-Site Request Forgery (1.10.1)
-
CWE-352
High
WordPress Plugin WP Hotel Booking Cross-Site Request Forgery (1.10.5)
CVE-2021-36852
CWE-352
High
WordPress Plugin WP Hotel Booking PHP Object Injection (1.10.3)
CVE-2020-29047
CWE-915
High
WordPress Plugin WP Hotel Booking Remote Code Execution (1.10.2)
CVE-2020-29047
CWE-502
High
WordPress Plugin WP Hotel Booking SQL Injection (2.1.0)
CVE-2024-3605
CWE-89
High
WordPress Plugin WP htaccess Control Unspecified Vulnerability (2.4)
-
-
High
WordPress Plugin WP Htaccess Editor Unspecified Vulnerability (1.0.1)
-
-
High
WordPress Plugin WP HTML Author Bio Cross-Site Scripting (1.2.0)
CVE-2021-24545
CWE-79
High
WordPress Plugin WP HTML Sitemap Cross-Site Request Forgery (1.2)
CVE-2014-2675
CWE-352
High
WordPress Plugin WP Human Resource Management Security Bypass (2.2.14)
-
CWE-264
High
WordPress Plugin WP Human Resource Management Security Bypass (2.2.5)
CVE-2019-9574
CWE-264
High
WordPress Plugin WP Humans.txt Cross-Site Scripting (1.0.6)
CVE-2022-3392
CWE-79
High
WordPress Plugin WP iCommerce-the first interactive ecommerce for wordpress SQL Injection (1.1.1)
CVE-2021-24402
CWE-89
High
WordPress Plugin WP Idea Stream Cross-Site Scripting (2.1.1)
-
CWE-79
High
WordPress Plugin WP Image Zoom Denial of Service (1.23)
-
CWE-400
High
WordPress Plugin WP Image Zoom Local File Inclusion (1.46)
CVE-2021-24447
CWE-22
High
WordPress Plugin WP Import Export Information Disclosure (3.9.15)
CVE-2022-0236
CWE-200
High
WordPress Plugin WP Import Export Lite Information Disclosure (3.9.15)
CVE-2022-0236
CWE-200
High
WordPress Plugin WP Import Export Lite Security Bypass (3.9.4)
-
CWE-284
High
WordPress Plugin WP Infusionsoft WooCommerce Cross-Site Scripting (1.0.8)
-
CWE-79
High
WordPress Plugin WP Inimat Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin WP Insightly for Contact Form 7 and Ninja Forms Cross-Site Scripting (1.0.7)
-
CWE-79
High
WordPress Plugin WP Instagram-Best Instagram Feeds Cross-Site Scripting (1.0.19)
-
CWE-79
High
WordPress Plugin WP Intercom-Slack for WordPress Information Disclosure (1.2.1)
CVE-2019-14365
CWE-200
High
WordPress Plugin WP Inventory Manager Cross-Site Scripting (1.7.8)
-
CWE-79
High
WordPress Plugin WP Inventory Manager Unspecified Vulnerability (1.8.1)
-
-
High
WordPress Plugin WP Job Manager Cross-Site Request Forgery (1.25.2)
-
CWE-352
High
WordPress Plugin WP Job Manager Cross-Site Scripting (1.23.7)
-
CWE-79
High
WordPress Plugin WP Job Manager Cross-Site Scripting (1.26.1)
-
CWE-79
High
WordPress Plugin WP Job Manager PHP Object Injection (1.29.2)
-
CWE-915
High
WordPress Plugin WP Job Manager PHP Object Injection (1.31.2)
-
CWE-915
High
WordPress Plugin WP Job Manager Privilege Escalation (1.34.3)
-
CWE-264
High
WordPress Plugin WP Job Manager Privilege Escalation (1.34.4)
-
CWE-264
High
WordPress Plugin WP Job Manager Unspecified Vulnerability (1.32.2)
-
-
High
WordPress Plugin WP Jobs Cross-Site Scripting (1.6)
CVE-2017-14751
CWE-79
High
WordPress Plugin WP Jobs SQL Injection (1.4)
CVE-2017-9603
CWE-89
High
WordPress Plugin WP jPlayer Cross-Site Scripting (0.1)
CVE-2013-1942
CWE-79
High
WordPress Plugin WP JS Cross-Site Scripting (2.0.6)
CVE-2022-1567
CWE-79
High
WordPress Plugin WP Js External Link Info Cross-Site Scripting (1.21)
-
CWE-79
High
WordPress Plugin WP Js External Link Info Open Redirect (1.21)
-
CWE-601
High
WordPress Plugin WP Keyword Link Multiple Cross-Site Scripting Vulnerabilities (1.7)
-
CWE-79
High
WordPress Plugin WP Last Modified Info Cross-Site Scripting (1.6.5)
-
CWE-79
High
WordPress Plugin WP Lead Management Cross-Site Scripting (3.0.0)
-
CWE-79
High
WordPress Plugin WP Learn Manager Cross-Site Scripting (1.1.2)
CVE-2021-24504
CWE-79
High
WordPress Plugin WP Learn Manager Security Bypass (1.1.4)
-
CWE-264
High
WordPress Plugin WP Legal Pages Cross-Site Scripting (1.0.1)
-
CWE-79
High
WordPress Plugin WP Like Button Security Bypass (1.6.0)
CVE-2019-13344
CWE-264
High
WordPress Plugin WP Limit Login Attempts Security Bypass (2.6.4)
CVE-2022-4303
CWE-693
High
WordPress Plugin WP Limit Login Attempts SQL Injection (2.0.0)
CVE-2015-6829
CWE-89
High
WordPress Plugin WP Limit Posts Automatically Cross-Site Request Forgery (0.7)
CVE-2014-9401
CWE-352
High
WordPress Plugin WP Link To Us Multiple Cross-Site Scripting Vulnerabilities (2.0)
CVE-2013-1808
CWE-79
High
WordPress Plugin WP Live Chat Support Pro Arbitrary File Upload (8.0.06)
CVE-2018-12426
CWE-434
High
WordPress Plugin WP Live Chat Support Pro Unspecified Vulnerability (8.0.07)
-
-
High
WordPress Plugin WP Live.php 's' Parameter Cross-Site Scripting (1.2.1)
CVE-2012-5346
CWE-79
High
WordPress Plugin WP Login Security and History Cross-Site Request Forgery (1.0)
CVE-2021-24328
CWE-352
High
WordPress Plugin WP Logs Book Cross-Site Scripting (1.0.1)
CVE-2024-4477
CWE-79
High
WordPress Plugin WP Mail Cross-Site Scripting (1.1)
CVE-2017-5942
CWE-79
High
WordPress Plugin WP Mail Log Cross-Site Request Forgery (1.0.1)
CVE-2022-45807
CWE-352
High
WordPress Plugin WP Mail Log Cross-Site Scripting (1.1.1)
CVE-2023-3088
CWE-79
High
WordPress Plugin WP Mail Logging Cross-Site Scripting (1.11.1)
CVE-2023-3081
CWE-79
High
WordPress Plugin WP Mail Logging Cross-Site Scripting (1.8.2)
-
CWE-79
High
WordPress Plugin WP Mail Logging Multiple Unspecified Vulnerabilities (1.5.0)
-
-
High
WordPress Plugin WP Mail Logging Security Bypass (1.11.2)
-
CWE-862
High