Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Application Vulnerabilities

This page lists 23441 vulnerabilities in 68 categories.

Critical: 1499 High: 12791 Medium: 8230 Low: 857 Information: 64
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin 123devis-affiliation Cross-Site Scripting (1.0.4)
-
CWE-79
High
WordPress Plugin 1player Cross-Site Scripting (1.3)
-
CWE-79
High
WordPress Plugin 2 Click Social Media Buttons 'xing-url' Parameter Cross-Site Scripting (0.32.2)
CVE-2012-4273
CWE-79
High
WordPress Plugin 2kb Amazon Affiliates Store Cross-Site Scripting (2.1.0)
CVE-2017-14622
CWE-79
High
WordPress Plugin 2Way VideoCalls and Random Chat-HTML5 Webcam Videochat Cross-Site Scripting (4.41)
-
CWE-79
High
WordPress Plugin 2Way VideoCalls and Random Chat-HTML5 Webcam Videochat Cross-Site Scripting (5.2.7)
CVE-2021-34656
CWE-79
High
WordPress Plugin 301 Redirects-Easy Redirect Manager Cross-Site Request Forgery (2.72)
-
CWE-352
High
WordPress Plugin 301 Redirects-Easy Redirect Manager Security Bypass (2.40)
CVE-2019-19915
CWE-264
High
WordPress Plugin 301 Redirects-Easy Redirect Manager SQL Injection (2.50)
CVE-2021-24142
CWE-89
High
WordPress Plugin 360 Product Rotation Arbitrary File Upload (1.2.4)
-
CWE-434
High
WordPress Plugin 360 Product Rotation Cross-Site Scripting (1.4.7)
CVE-2019-15082
CWE-79
High
WordPress Plugin 360 Product Viewer Cross-Site Scripting (2.5.1)
-
CWE-79
High
WordPress Plugin 3D Banner Rotator 'upload.php' Arbitrary File Upload (2.1)
-
CWE-434
High
WordPress Plugin 3D Cover Carousel Cross-Site Scripting (1.0)
CVE-2021-38318
CWE-79
High
WordPress Plugin 3D Flick Slideshow 'upload.php' Arbitrary File Upload (2.1)
-
CWE-434
High
WordPress Plugin 3D Product configurator for WooCommerce Arbitrary File Upload (1.5.531)
-
CWE-434
High
WordPress Plugin 3D Slider Slice Box Multiple Cross-Site Scripting Vulnerabilities (1.0)
-
CWE-79
High
WordPress Plugin 3D Tag Cloud Cross-Site Request Forgery (3.8)
CVE-2022-36417
CWE-352
High
WordPress Plugin 3dady real-time web stats Cross-Site Request Forgery (1.0)
-
CWE-352
High
WordPress Plugin 3DPrint Cross-Site Request Forgery (3.5.4.7)
CVE-2022-3899
CWE-352
High
WordPress Plugin 3DPrint Lite Arbitrary File Upload (1.9.1.4)
-
CWE-434
High
WordPress Plugin 3DPrint Lite Cross-Site Scripting (1.9.1.5)
-
CWE-79
High
WordPress Plugin 3xSocializer Cross-Site Scripting (0.98.22)
-
CWE-79
High
WordPress Plugin 404 SEO Redirection Cross-Site Scripting (1.3)
CVE-2021-24325
CWE-79
High
WordPress Plugin 404 SEO Redirection SQL Injection (1.0)
-
CWE-89
High
WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors Cloaking (2.2.9)
-
-
High
WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors Cross-Site Request Forgery (3.0.8)
CVE-2021-24766
CWE-352
High
WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors Cross-Site Scripting (2.3.0)
-
CWE-79
High
WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors Cross-Site Scripting (2.3.1)
-
CWE-79
High
WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors Security Bypass (3.0.1)
-
CWE-264
High
WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors Security Bypass (3.0.7)
-
CWE-264
High
WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors SQL Injection (2.0.2)
CVE-2015-9323
CWE-89
High
WordPress Plugin 404page-your smart custom 404 error page Cross-Site Request Forgery (10.3)
-
CWE-352
High
WordPress Plugin 4k Icons for Visual Composer-Free Cross-Site Scripting (1.0)
CVE-2021-24435
CWE-79
High
WordPress Plugin 5gig Concerts Unspecified Vulnerability (1.0)
-
-
High
WordPress Plugin A Page Flip Book 'pageflipbook_language' Parameter Local File Include (2.3)
CVE-2012-6652
CWE-22
High
WordPress Plugin A to Z Category Listing 'R' Parameter SQL Injection (1.3)
-
CWE-89
High
WordPress Plugin A. Gallery TimThumb Arbitrary File Upload (0.9rev378511)
CVE-2011-4106
CWE-20
High
WordPress Plugin A.M.Y. Cross-Site Scripting (1.3.3)
-
CWE-79
High
WordPress Plugin A/B Test 'action' Parameter Directory Traversal (1.0.6)
-
CWE-22
High
WordPress Plugin A2 Optimized WP Information Disclosure (2.0.10.8)
-
CWE-200
High
WordPress Plugin AB Google Map Travel (AB-MAP) Multiple Vulnerabilities (3.4)
CVE-2015-2755
CWE-352
High
WordPress Plugin AB Press Optimizer Multiple Cross-Site Scripting Vulnerabilities (1.1.1)
-
CWE-79
High
WordPress Plugin Abandoned Cart Lite for WooCommerce Cross-Site Request Forgery (5.8.5)
-
CWE-352
High
WordPress Plugin Abandoned Cart Lite for WooCommerce Cross-Site Scripting (5.1.3)
-
CWE-79
High
WordPress Plugin Abandoned Cart Lite for WooCommerce Security Bypass (5.14.2)
CVE-2023-2986
CWE-326
High
WordPress Plugin Abandoned Cart Lite for WooCommerce SQL Injection (1.8)
-
CWE-89
High
WordPress Plugin Abandoned Cart Lite for WooCommerce SQL Injection (5.8.1)
-
CWE-89
High
WordPress Plugin Abandoned Cart Pro for WooCommerce Cross-Site Scripting (7.11.1)
-
CWE-79
High
WordPress Plugin Abandoned Cart Recovery for WooCommerce Cross-Site Request Forgery (1.0.4)
-
CWE-352
High
WordPress Plugin ABASE Multiple Vulnerabilities (2.6)
-
CWE-352
High
WordPress Plugin ABC Test 'id' Parameter Cross-Site Scripting (0.1)
-
CWE-79
High
WordPress Plugin About Author Box Cross-Site Scripting (1.0.1)
CVE-2021-24745
CWE-79
High
WordPress Plugin About Author Cross-Site Scripting (1.3.9)
-
CWE-79
High
WordPress Plugin About Me Page Cross-Site Scripting (4.0)
-
CWE-79
High
WordPress Plugin Absolute Privacy 'abpr_authenticateUser()' Security Bypass (2.0.5)
-
CWE-264
High
WordPress Plugin Absolute Reviews Cross-Site Request Forgery (1.0.8)
-
CWE-352
High
WordPress Plugin Abstract Submission Local File Inclusion (0.6)
CVE-2014-2383
CWE-22
High
WordPress Plugin Academy LMS-eLearning and online course solution for WordPress Information Disclosure (1.9.25)
CVE-2024-35171
CWE-200
High
WordPress Plugin Academy LMS-eLearning and online course solution for WordPress Multiple Security Bypass Vulnerabilities (1.9.16)
CVE-2024-33912
CWE-862
High
WordPress Plugin Academy LMS-eLearning and online course solution for WordPress Privilege Escalation (1.9.19)
CVE-2024-1505
CWE-269
High
WordPress Plugin Accept Donations with PayPal Cross-Site Request Forgery (1.3)
CVE-2021-24572
CWE-352
High
WordPress Plugin Accept Donations with PayPal Cross-Site Request Forgery (1.3.3)
CVE-2021-24989
CWE-352
High
WordPress Plugin Accept Donations with PayPal Cross-Site Scripting (1.3.1)
CVE-2021-24815
CWE-79
High
WordPress Plugin Accept Signups 'email' Parameter Cross-Site Scripting (0.1)
-
CWE-79
High
WordPress Plugin Accept Stripe Donation-AidWP Cross-Site Request Forgery (3.1.5)
CVE-2022-47422
CWE-352
High
WordPress Plugin Accept Stripe Donation-AidWP Security Bypass (2.8)
-
CWE-862
High
WordPress Plugin Access Demo Importer Arbitrary File Upload (1.0.6)
CVE-2021-39317
CWE-434
High
WordPress Plugin Access Expiration Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin AccessAlly Information Disclosure (3.5.6)
CVE-2021-24226
CWE-200
High
WordPress Plugin AccessAlly PHP Code Execution (3.3.1)
-
CWE-94
High
WordPress Plugin Accessibility Suite by Online ADA SQL Injection (2.0.10)
-
CWE-89
High
WordPress Plugin AccessPress Anonymous Post Pro Arbitrary File Upload (3.1.9)
CVE-2017-16949
CWE-434
High
WordPress Plugin AccessPress Custom CSS includes Backdoor [Only if downloaded via the vendor website] (2.0.1)
CVE-2021-24867
CWE-912
High
WordPress Plugin AccessPress Custom Post Type includes Backdoor [Only if downloaded via the vendor website] (1.0.8)
CVE-2021-24867
CWE-912
High