Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Application Vulnerabilities

This page lists 23441 vulnerabilities in 68 categories.

Critical: 1499 High: 12791 Medium: 8230 Low: 857 Information: 64
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin AI ChatBot Cross-Site Scripting (4.9.6)
CVE-2023-5606
CWE-79
High
WordPress Plugin AI ChatBot Directory Traversal (4.9.2)
CVE-2023-5241
CWE-22
High
WordPress Plugin AI ChatBot Information Disclosure (4.8.9)
CVE-2023-5254
CWE-200
High
WordPress Plugin AI ChatBot SQL Injection (4.8.9)
CVE-2023-5204
CWE-89
High
WordPress Plugin Airtight Security & Features Formerly Redirect Editor And Security Unspecified Vulnerability (1.3)
-
-
High
WordPress Plugin Airtight Security & Features Formerly Redirect Editor And Security Unspecified Vulnerability (2.1.7)
-
-
High
WordPress Plugin AIT Themes-CSV Import/Export Arbitrary File Upload (3.0.3)
-
CWE-434
High
WordPress Plugin Ajax BootModal Login Security Bypass (1.4.3)
CVE-2018-15876
CWE-264
High
WordPress Plugin Ajax Calendar 'example.php' Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin Ajax Category Dropdown Cross-Site Scripting and SQL Injection Vulnerabilities (0.1.5)
-
CWE-89
High
WordPress Plugin AJAX Comment Page Cross-Site Scripting (3.25)
-
CWE-79
High
WordPress Plugin Ajax Contact Form Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin Ajax Gallery 'list.php' SQL Injection (3.0)
-
CWE-89
High
WordPress Plugin Ajax Multi Upload 'upload.php' Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin Ajax Pagination (twitter Style) Local File Inclusion (1.1)
CVE-2014-2674
CWE-22
High
WordPress Plugin Ajax Plugin Helper Cross-Site Scripting (1.0.5)
-
CWE-79
High
WordPress Plugin AJAX Post Search 'srch_txt' Parameter SQL Injection (1.2)
CVE-2012-5853
CWE-89
High
WordPress Plugin AJAX Random Post Cross-Site Scripting (2.00)
CVE-2016-1000127
CWE-79
High
WordPress Plugin Ajax Search Lite Remote Command Execution (3.1)
-
CWE-95
High
WordPress Plugin Ajax Search Lite Security Bypass (3.1)
-
CWE-264
High
WordPress Plugin Ajax Search Pro Security Bypass (3.5)
-
CWE-264
High
WordPress Plugin Ajax Store Locator Directory Traversal (1.2.0)
-
CWE-22
High
WordPress Plugin Ajax Store Locator SQL Injection (1.2.0)
-
CWE-89
High
WordPress Plugin AJS Instagram Feed Cross-Site Scripting (1.0)
-
CWE-79
High
WordPress Plugin Akeeba Backup CORE for WordPress Arbitrary File Upload (1.1.3)
CVE-2014-7228
CWE-310
High
WordPress Plugin Akismet Cross-Site Scripting (3.1.4)
-
CWE-79
High
WordPress Plugin Albo Pretorio On line Multiple Vulnerabilities (3.2)
-
CWE-352
High
WordPress Plugin ALD-Dropshipping and Fulfillment for AliExpress and WooCommerce Multiple Vulnerabilities (1.0.21)
CVE-2022-46811
CWE-862
High
WordPress Plugin Alert Before Your Post Cross-Site Scripting (0.1.1)
CVE-2011-5107
CWE-79
High
WordPress Plugin AlertWire Information Disclosure (1.1.1)
-
CWE-200
High
WordPress Plugin AliExpress Dropshipping with AliNext Lite Cross-Site Request Forgery (3.3.5)
CVE-2024-37212
CWE-352
High
WordPress Plugin All 404 Redirect to Homepage Cross-Site Scripting (1.20)
CVE-2021-24326
CWE-79
High
WordPress Plugin All 404 Redirect to Homepage Cross-Site Scripting (1.21)
-
CWE-79
High
WordPress Plugin All Category SEO Updater Cross-Site Scripting (0.2.7)
-
CWE-79
High
WordPress Plugin All In One Favicon Cross-Site Scripting (4.6)
CVE-2018-13832
CWE-79
High
WordPress Plugin All In One Schema.org Rich Snippets Cross-Site Scripting (1.4.4)
-
CWE-79
High
WordPress plugin All in One SEO Pack privilege escalation vulnerabilities
-
CWE-269
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Request Forgery (4.2.3.1)
CVE-2022-38093
CWE-352
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (2.0.3)
-
CWE-79
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (2.2.2)
-
CWE-79
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (2.2.6.1)
-
CWE-79
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (2.3.6.1)
-
CWE-79
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (2.3.7)
-
CWE-79
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (2.9.1.1)
-
CWE-79
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (3.2.6)
CVE-2019-16520
CWE-79
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (3.6.1)
CVE-2020-35946
CWE-79
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Information Disclosure (2.2.5.1)
CVE-2015-0902
CWE-200
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Multiple Cross-Site Scripting Vulnerabilities (4.2.9)
CVE-2023-0586
CWE-79
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Multiple Vulnerabilities (2.1.5)
-
CWE-287
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Multiple Vulnerabilities (4.1.5.2)
CVE-2021-25037
CWE-287
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Remote Code Execution (4.1.0.1)
CVE-2021-24307
CWE-94
High
WordPress Plugin All in One Social Lite Server-Side Request Forgery (1.0)
-
CWE-918
High
WordPress Plugin All in One Support Button+Callback Request. WhatsApp, Messenger, Telegram, LiveChat and more Cross-Site Scripting (1.8.7)
-
CWE-79
High
WordPress Plugin All in One Webmaster Cross-Site Request Forgery (8.2.3)
CVE-2013-2696
CWE-352
High
WordPress Plugin All in One Webmaster Unspecified Vulnerability (11.0)
-
-
High
WordPress Plugin All Post Contact Form Arbitrary File Upload (1.1.4)
-
CWE-434
High
WordPress Plugin All Video Gallery 'vid' Parameter Multiple SQL Injection Vulnerabilities (1.1)
CVE-2012-6653
CWE-89
High
WordPress Plugin All Video Gallery SQL Injection (1.2)
CVE-2014-5186
CWE-89
High
WordPress Plugin All-in-One Addons for Elementor-WidgetKit Cross-Site Scripting (2.4.3)
CVE-2022-4256
CWE-79
High
WordPress Plugin All-in-One Addons for Elementor-WidgetKit Multiple Cross-Site Scripting Vulnerabilities (2.3.9)
CVE-2021-24267
CWE-79
High
WordPress Plugin All-in-One Custom Backgrounds Lite Unspecified Vulnerability (2.0.2)
-
-
High
WordPress Plugin All-in-One Event Calendar Cross-Site Scripting (2.4.0)
-
CWE-79
High
WordPress Plugin All-in-One Event Calendar Cross-Site Scripting (2.5.18)
-
CWE-79
High
WordPress Plugin All-in-One Event Calendar Cross-Site Scripting (2.5.38)
-
CWE-79
High
WordPress Plugin All-in-One Event Calendar Multiple Cross-Site Scripting Vulnerabilities (1.5)
CVE-2012-1835
CWE-79
High
WordPress Plugin All-in-One Event Calendar Multiple Vulnerabilities (1.10-standard)
-
CWE-89
High
WordPress Plugin All-in-One Event Calendar Multiple Vulnerabilities (1.9)
-
CWE-89
High
WordPress Plugin All-in-One Event Calendar Multiple Vulnerabilities (2.3.12)
-
CWE-89
High
WordPress Plugin All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs-My Sticky Elements Cross-Site Scripting (2.0.3)
CVE-2022-0148
CWE-79
High
WordPress Plugin All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs-My Sticky Elements SQL Injection (2.0.8)
CVE-2023-0487
CWE-89
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Request Forgery (3.8.9)
CVE-2015-0895
CWE-352
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Request Forgery (4.4.3)
-
CWE-352
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Request Forgery (5.1.0)
CVE-2022-44737
CWE-352
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Scripting (3.8.3)
-
CWE-79
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Scripting (3.9.4)
-
CWE-79
High