Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Application Vulnerabilities

This page lists 23441 vulnerabilities in 68 categories.

Critical: 1499 High: 12791 Medium: 8230 Low: 857 Information: 64
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Advanced Custom Fields (ACF) Cross-Site Scripting (6.1.5)
CVE-2023-30777
CWE-79
High
WordPress Plugin Advanced Custom Fields (ACF) Information Disclosure (6.0.2)
CVE-2022-40696
CWE-200
High
WordPress Plugin Advanced Custom Fields (ACF) Multiple Security Bypass Vulnerabilities (5.10.2)
CVE-2021-20867
CWE-862
High
WordPress Plugin Advanced Custom Fields (ACF) PHP Object Injection (5.7.10)
-
CWE-915
High
WordPress Plugin Advanced Custom Fields (ACF) PHP Object Injection (6.0.7)
CVE-2023-1196
CWE-915
High
WordPress Plugin Advanced Custom Fields (ACF) Security Bypass (5.12)
CVE-2022-23183
CWE-862
High
WordPress Plugin Advanced Custom Fields (ACF) Security Bypass (5.9.9)
-
CWE-264
High
WordPress Plugin Advanced Custom Fields PRO Arbitrary File Upload (5.12.2)
CVE-2022-2594
CWE-434
High
WordPress Plugin Advanced Custom Fields PRO Cross-Site Scripting (5.9.0)
CVE-2021-24241
CWE-79
High
WordPress Plugin Advanced Custom Fields PRO Cross-Site Scripting (6.1.5)
CVE-2023-30777
CWE-79
High
WordPress Plugin Advanced Custom Fields PRO Information Disclosure (6.0.2)
CVE-2022-40696
CWE-200
High
WordPress Plugin Advanced Custom Fields PRO Multiple Security Bypass Vulnerabilities (5.10)
CVE-2021-20867
CWE-862
High
WordPress Plugin Advanced Custom Fields PRO PHP Object Injection (6.0.7)
CVE-2023-1196
CWE-915
High
WordPress Plugin Advanced Custom Fields PRO Security Bypass (5.12)
CVE-2022-23183
CWE-862
High
WordPress Plugin Advanced Custom Fields:reCAPTCHA Field Security Bypass (1.1.1)
-
CWE-264
High
WordPress Plugin Advanced Custom Fields:Table Field Cross-Site Scripting (1.1.12)
-
CWE-79
High
WordPress Plugin Advanced Database Cleaner SQL Injection (3.0.1)
CVE-2021-24141
CWE-89
High
WordPress Plugin Advanced Dewplayer Directory Traversal (1.2)
CVE-2013-7240
CWE-22
High
WordPress Plugin Advanced Dynamic Pricing for WooCommerce Cross-Site Request Forgery (4.1.3)
CVE-2022-38095
CWE-352
High
WordPress Plugin Advanced Dynamic Pricing for WooCommerce Multiple Vulnerabilities (4.1.5)
CVE-2022-43491
CWE-862
High
WordPress Plugin Advanced File Manager Directory Traversal (5.1)
CVE-2023-3814
CWE-22
High
WordPress Plugin Advanced File Manager Information Disclosure (5.2.4)
CVE-2024-5598
CWE-200
High
WordPress Plugin Advanced Forms for ACF Pro Security Bypass (1.6.8)
CVE-2021-24892
CWE-264
High
WordPress Plugin Advanced Forms for ACF Security Bypass (1.6.8)
CVE-2021-24892
CWE-264
High
WordPress Plugin Advanced Import: One Click Import for WordPress or Theme Demo Data Security Bypass (1.0.7)
-
CWE-264
High
WordPress Plugin Advanced Import:One Click Import for WordPress or Theme Demo Data Cross-Site Request Forgery (1.3.7)
CVE-2022-3677
CWE-352
High
WordPress Plugin Advanced Order Export For WooCommerce Cross-Site Scripting (3.1.3)
CVE-2020-11727
CWE-79
High
WordPress Plugin Advanced Order Export For WooCommerce Cross-Site Scripting (3.1.7)
CVE-2021-24169
CWE-79
High
WordPress Plugin Advanced Order Export For WooCommerce CSV Injection (1.5.4)
CVE-2018-11525
CWE-20
High
WordPress Plugin Advanced Page Manager Cross-Site Scripting (1.4.1)
-
CWE-79
High
WordPress Plugin Advanced Permalinks Cross-Site Scripting (0.1.19)
-
CWE-79
High
WordPress Plugin Advanced Popups Cross-Site Request Forgery (1.1.1)
-
CWE-352
High
WordPress Plugin Advanced post slider Unspecified Vulnerability (2.4.0)
-
-
High
WordPress Plugin Advanced Post Type Ratings Cross-Site Scripting (1.01)
-
CWE-79
High
WordPress Plugin Advanced Search Cross-Site Scripting (1.1.2)
CVE-2021-38348
CWE-79
High
WordPress Plugin Advanced Shipment Tracking for WooCommerce Security Bypass (3.2.6)
-
CWE-264
High
WordPress Plugin Advanced Shipping Validation for WooCommerce Cross-Site Scripting (1.0.0)
-
CWE-79
High
WordPress Plugin Advanced Text Widget 'page' Parameter Cross-Site Scripting (2.0.0)
CVE-2011-4618
CWE-79
High
WordPress Plugin Advanced User Registration and Management Cross-Site Scripting (2.3.5)
-
CWE-79
High
WordPress Plugin Advanced Woo Search Cross-Site Scripting (2.77)
CVE-2023-2452
CWE-79
High
WordPress Plugin Advanced Woo Search Information Disclosure (1.99)
CVE-2020-12070
CWE-200
High
WordPress Plugin Advanced Woo Search Unspecified Vulnerability (1.69)
-
-
High
WordPress Plugin Advanced WP Columns Cross-Site Scripting (2.0.6)
CVE-2022-3426
CWE-79
High
WordPress Plugin Advanced XML Reader XML External Entity Information Disclosure (0.3.4)
-
CWE-611
High
WordPress Plugin AdVert Cross-Site Scripting (1.0.5)
-
CWE-79
High
WordPress Plugin Advertisement Management Multiple Vulnerabilities (1.0)
-
CWE-352
High
WordPress Plugin Advertizer 'id' Parameter SQL Injection (1.0)
-
CWE-89
High
WordPress Plugin AdWizz 'link' Parameter Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin Aesop Story Engine Cross-Site Scripting (1.6)
-
CWE-79
High
WordPress Plugin Affiliate Ads for Clickbank Products Cross-Site Scripting (1.6)
CVE-2017-18011
CWE-79
High
WordPress Plugin Affiliate Link Manager Cross-Site Scripting (2.1.1)
-
CWE-79
High
WordPress Plugin Affiliate Power-Sales Tracking for Affiliate Marketers Cross-Site Scripting (2.2.0)
-
CWE-79
High
WordPress Plugin Affiliate Press Multiple Cross-Site Scripting Vulnerabilities (0.3.8)
-
CWE-79
High
WordPress Plugin Affiliate PRO Cross-Site Scripting (1.3.1)
CVE-2021-24435
CWE-79
High
WordPress Plugin Affiliates Manager Cross-Site Request Forgery (2.6.5)
CVE-2019-15868
CWE-352
High
WordPress Plugin Affiliates Manager Cross-Site Scripting (2.8.9)
CVE-2021-25078
CWE-79
High
WordPress Plugin Affiliates Manager Multiple Vulnerabilities (2.9.13)
CVE-2022-2799
CWE-1236
High
WordPress Plugin Affiliates Manager SQL Injection (2.8.6)
CVE-2021-24844
CWE-89
High
WordPress Plugin Affiliates Manager Unspecified Vulnerability (2.7.7)
-
-
High
WordPress Plugin Affiliates Multiple Cross-Site Scripting Vulnerabilities (2.13.1)
-
CWE-79
High
WordPress Plugin AffiliateWP Cross-Site Scripting (2.0.9)
-
CWE-79
High
WordPress Plugin AffiliateWP SQL Injection (1.5.6)
-
CWE-89
High
WordPress Plugin Afterpay Gateway for WooCommerce Cross-Site Scripting (3.2.0)
-
CWE-79
High
WordPress Plugin afterRead Unspecified Vulnerability (0.3)
-
-
High
WordPress Plugin Age Gate Cross-Site Scripting (2.16.3)
-
CWE-79
High
WordPress Plugin Age Gate Open Redirect (2.13.4)
-
CWE-601
High
WordPress Plugin Age Gate Security Bypass (2.17.0)
-
CWE-264
High
WordPress Plugin Age Gate Unspecified Vulnerability (2.18.5)
-
-
High
WordPress Plugin Age Verification 'redirect_to' Parameter URI Redirection (0.4)
CVE-2012-6499
CWE-20
High
WordPress Plugin Age Verify Cross-Site Scripting (0.2.8)
-
CWE-79
High
WordPress Plugin Agent Storm by StormRETS Multiple Cross-Site Scripting Vulnerabilities (1.1.35)
-
CWE-79
High
WordPress Plugin AgentEasy Properties Cross-Site Scripting (1.0.4)
-
CWE-79
High
WordPress Plugin AgentPress Broker Listings Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin AGP Font Awesome Collection Cross-Site Scripting (2.7.2)
-
CWE-79
High
WordPress Plugin AI ChatBot Arbitrary File Deletion (4.9.2)
CVE-2023-5212
CWE-73
High